Re: DH group exchange (Re: SSH key algorithm updates)

[Darren Tucker <dtucker%zip.com.au@localhost>]

On Sat, Dec 12, 2015 at 1:20 AM, Matt Johnston <matt%ucc.asn.au@localhost> wrote:
> I've added preliminary diffie-hellman-group14-sha256 to Dropbear, https://secure.ucc.asn.au/hg/dropbear/rev/d2f9ef67af15
>
> The OpenSSH patch seems to have problems, I've replied in bugzilla.

Damien implemented the missing code and I've updated the patch in the
bug.  With that change, openssh client interops with dropbear server.
There's some problem with dropbear client and openssh server, but that
combination doesn't work for me without my changes using group14-sha1
so I'll follow up with that off-list.


Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.