Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-25 Thread Maciej Soltysiak
Funny thing. Latest dropbear still has these 2 commented out for some reason. Maybe it's worth checking upstream. Maciej On 25 Oct 2014 15:36, "Dave Taht" wrote: > I'd argue more in favor of updating to the latest dropbear, pulled anyway. > > On Sat, Oct 25, 2014 at 5:31 AM, Maciej Soltysiak >

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-25 Thread Dave Taht
I'd argue more in favor of updating to the latest dropbear, pulled anyway. On Sat, Oct 25, 2014 at 5:31 AM, Maciej Soltysiak wrote: > On Fri, Oct 24, 2014 at 8:54 PM, Michael Richardson wrote: >> >> Maciej Soltysiak wrote: >> >> The reason why it hurts me is that I have servers configured >

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-25 Thread Maciej Soltysiak
On Fri, Oct 24, 2014 at 8:54 PM, Michael Richardson wrote: > > Maciej Soltysiak wrote: > >> The reason why it hurts me is that I have servers configured > >> according to bettercrypto.org and I can't connect from cero (rare > >> occasions, but > >> > >> 1) MD5 != HMAC-MD5. >

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Michael Richardson
Maciej Soltysiak wrote: >> The reason why it hurts me is that I have servers configured >> according to bettercrypto.org and I can't connect from cero (rare >> occasions, but >> >> 1) MD5 != HMAC-MD5. > That I didn't know, thanks Michael. For some reason bettercrypto.org

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Maciej Soltysiak
On Fri, Oct 24, 2014 at 7:52 PM, Michael Richardson wrote: > > The reason why it hurts me is that I have servers configured according > > to bettercrypto.org and I can't connect from cero (rare occasions, but > > 1) MD5 != HMAC-MD5. That I didn't know, thanks Michael. For some reason bette

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Michael Richardson
Maciej Soltysiak wrote: > For some reason dropbear doesn't have modern MACs for SSH. On cero > 3.10.36 I've got Dropbear SSH client v2013.59: Just to make sure you are clear: hmac-md5 is not subject to any of the preimage attacks that md5 is subject to. It's not the same thing. > T

[Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Maciej Soltysiak
Hi list, For some reason dropbear doesn't have modern MACs for SSH. On cero 3.10.36 I've got Dropbear SSH client v2013.59: root@cerowrt:/etc# ssh -m help ssh: Available MACs: hmac-sha1-96,hmac-sha1,hmac-md5 (MD5 BTW...) However, dropbear since v2013.56 has support for sha2 (https://matt.ucc.asn.