Uncategorized

22 posts

libssh 0.6.3 (Security release)

This is an important SECURITY and maintenance release in order to address CVE-2014-0017 – PRNG state reuse on forking servers. This bug happens when a SSH server forks on new connections. OpenSSL PRNG does not always detect the change of process (PID collision) and PRNG state may be shared between two successive children. However that bug is greatly mitigated by […]

libssh 0.6.2 (Security release)

This is an important SECURITY and maintenance release in order to address CVE-2014-0017 – PRNG state reuse on forking servers. This bug happens when a SSH server forks on new connections. OpenSSL PRNG does not always detect the change of process (PID collision) and PRNG state may be shared between two successive children. However that bug is greatly mitigated by […]

gro.h1558605308ssbil1558605308@652a1558605308hs-911558605308552ev1558605308ruc1558605308 key exchange !" rel="bookmark">OpenSSH introduces gro.h1558605308ssbil1558605308@652a1558605308hs-911558605308552ev1558605308ruc1558605308 key exchange !

A while back, I introduced a new key exchange mechanism, “ gro.h1558605308ssbil1558605308@652a1558605308hs-911558605308552ev1558605308ruc1558605308” in our code base. The reasons were explained together with the specifications. In a nutshell, this key exchange function is based on DJB’s Curve25519 elliptic curve Diffie-Hellman key exchange. This algorithm does not rely on NIST-based curves and gives us more security confidence against a possible backdoor in nistp-256 […]