Mailing List Archive

On Tue, 14 Mar 2000, Jean-Luc Cooke wrote:

> Hello all,
>
> I was wondering if CAST5 encryption is currently being added the
> openssh? It's a steller block cipher. No one's found any weaknesses
> in it yet and it's free for non profit use.

I am not aware of any plans to add ciphers. What benefit would
CAST5 give over 3DES (excellent security but slow) or Blowfish (fast)?

A couple of other things constrain us as well: we don't want
to have to change the SSH protocol and we would prefer support
for any new ciphers in OpenSSL first.

-d

--
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)

On Tue, Mar 14, 2000 at 11:06:44PM -0500, Jean-Luc Cooke wrote:
> Hello all,

> I was wondering if CAST5 encryption is currently being added the
> openssh? It's a steller block cipher. No one's found any weaknesses
> in it yet and it's free for non profit use.
^^^^^^^^^^^^^^^^^^
I think you just shot yourself in the ass.

They've been really restrictive about no encumbered algorithms
(like RSA) and you've just said this was encumbered for commercial use.

> TTYL

> JLC
> --

> #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
> $/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
> lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
> - I'm an international arms trafficker
> Explained: http://jlcooke.net/perlrsa

Mike
--
Michael H. Warfield | (770) 985-6132 | mhw@WittsEnd.com
(The Mad Wizard) | (770) 331-2437 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!

On Tue, 14 Mar 2000, Michael H. Warfield wrote:

> On Tue, Mar 14, 2000 at 11:06:44PM -0500, Jean-Luc Cooke wrote:
> > Hello all,
>
> > I was wondering if CAST5 encryption is currently being added the
> > openssh? It's a steller block cipher. No one's found any weaknesses
> > in it yet and it's free for non profit use.
> ^^^^^^^^^^^^^^^^^^
> I think you just shot yourself in the ass.
>
> They've been really restrictive about no encumbered algorithms
> (like RSA) and you've just said this was encumbered for commercial use.

Ahhh, no.

OpenSSH _depends_ on RSA, it is a real thorn in our sides :(

Fortunatly the RSA patent expires on Sept 20th this year.

-d


--
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)