3 ms·
Fwiw, I found a bunch of clients and libraries that didn't support AES-GCM at all, or only very recently. libssh2 is one example. That's made me nervous to make
by colmmacc 3y ago
Fwiw, I found a bunch of clients and libraries that didn't support AES-GCM at all, or only very recently. libssh2 is one example. That's made me nervous to make AES-GCM the only supported cipher as a mitigation.
- Aloisius 3y agoWhat about aes-ctr?
- lambdafu 3y agoDepends a bit on the MAC. CTR-EtM is technically vulnerable (i.e. cryptographically broken), but due to key stream desynchronization the attack will quickly lead to application errors, defeating the attacker. See Sect. 4.3.3.
- shaicoleman 3y agoFYI: libssh2 supports AES-GCM since 1.11.0 (released 2023-05-30)