Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cast128-ctr and blowfish-ctr are listed as fail and/or warn, but aren't part of recommendations at end #16

Closed
ckalinwi opened this issue Jan 2, 2020 · 3 comments

Comments

@ckalinwi
Copy link

ckalinwi commented Jan 2, 2020

cast128-ctr and blowfish-ctr (correctly) fail in the client (-c) report:

[snipped]

encryption algorithms (ciphers)

(enc) aes256-gcm@openssh.com -- [info] available since OpenSSH 6.2
(enc) aes128-gcm@openssh.com -- [info] available since OpenSSH 6.2
(enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
(enc) aes192-ctr -- [info] available since OpenSSH 3.7
(enc) blowfish-ctr -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- [fail] disabled since Dropbear SSH 0.53 - [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm
- [warn] using weak cipher mode - [warn] using small 64-bit block size
(enc) cast128-ctr -- [fail] deprecated cipher
(enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
(enc) arcfour -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm - [warn] using weak cipher

But aren't mentioned in the recommendations report:

algorithm recommendations

(rec) -arcfour -- enc algorithm to remove

A peek at the code doesn't show any obvious reason why this should happen, and I know it's minor, but the program is otherwise so thorough I felt I should let you know.

@jtesta
Copy link
Owner

jtesta commented Jan 8, 2020

Thanks for letting me know.

To speed up testing, what client & version did you encounter this with?

@ckalinwi
Copy link
Author

ckalinwi commented Jan 8, 2020 via email

jtesta added a commit that referenced this issue Mar 10, 2020
… camellia192-ctr, camellia256-cbc, camellia256-ctr). Fixed certain algorithms not appearing in the recommendations list (#16).
@jtesta
Copy link
Owner

jtesta commented Mar 10, 2020

Fixed in the dev branch. I also added the missing Camellia ciphers. I'll be making a stable release soon with them included.

Thanks for reporting this!

@jtesta jtesta closed this as completed Mar 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants