The Register® — Biting the hand that feeds IT

SSH sniffer attack poses minor risk

RaelianWingnut

Default is... 

Posted Tuesday 18th November 2008 14:29 GMT

Anyone remember what the default is for OpenSSH (block or stream cipher type)?

Justin Case

Think of the children 

Posted Tuesday 18th November 2008 15:59 GMT

Joke

Anything which poses risk to minors must be stopped.

John Haxby

Re: Default is ... 

Posted Tuesday 18th November 2008 16:31 GMT

Linux

For openssh 3.9p1, 4.3p2 and 5.1p1 (the versions I have readily to hand) the default cipher would appear to be aes128-cbc. You can put a "Ciphers" stanza in you ~/.ssh/config to choose one of the stream ciphers -- see ssh_config(5). I've no idea what you do if you're using winders.

I expect there'll be a patch along shortly though.

Anonymous Coward

Pedanticism "Corner" 

Posted Tuesday 18th November 2008 16:31 GMT

Boffin

"the Secure Shell (SSH) remote administration protocol"

hmmn. Remote shell protocol maybe, but it's used for a lot more than just admin work.

Tim Bates

So.... 

Posted Wednesday 19th November 2008 12:06 GMT

The ninjas that can manage a man in the middle could possibly capture packets and decrypt them back to plain text. Which if they are lucky contains something nice to steal.

Sounds like a pretty limited flaw. I won't be going out of my way to fix it... I'll fix it by waiting for Debian to fix it for me ;-)