[ https://issues.apache.org/jira/browse/SSHD-946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16951848#comment-16951848 ]
Lyor Goldstein commented on SSHD-946: ------------------------------------- Succeeded - the (un-documented ?) behavior compatible with {{OpenSSH}} is that the padding should not take into account the length field (4 bytes) when encrypt-then-MAC mode is used. > Supporting 'encrypt-then-MAC' mode > ---------------------------------- > > Key: SSHD-946 > URL: https://issues.apache.org/jira/browse/SSHD-946 > Project: MINA SSHD > Issue Type: New Feature > Reporter: Cornelis Hoeflake > Assignee: Lyor Goldstein > Priority: Major > > Hi, the current implementation uses by default '**encrypt-*and*-MAC' mode. Is > it possible to change this (or at least made it possible) to > 'encrypt-*then*-MAC'? > Please see also: > [https://crypto.stackexchange.com/questions/202/should-we-mac-then-encrypt-or-encrypt-then-mac] -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org For additional commands, e-mail: dev-h...@mina.apache.org