[Bug 3691] Connection to localhost succeeds with disabled MAC

2024-05-17 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3691

--- Comment #2 from Sam Zaydel  ---
Thank you, this implies the test is flawed. I should have been testing
with different ciphers, it sounds like. Thank you for explaining what
is going on here.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
___
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs


[Bug 3691] Connection to localhost succeeds with disabled MAC

2024-05-16 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3691

Damien Miller  changed:

   What|Removed |Added

 CC||d...@mindrot.org
 Resolution|--- |WORKSFORME
 Status|NEW |RESOLVED

--- Comment #1 from Damien Miller  ---
This is expected:

> debug1: kex: server->client cipher: aes128-...@openssh.com MAC:  
> compression: none
> debug1: kex: client->server cipher: aes128-...@openssh.com MAC:  
> compression: none

MACs are not used for AEAD ciphers like AES-GCM as these provide
message integrity in the cipher itself.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
___
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs