1
1
Dirkjan Bussink 4a67c19118 Add tests and implementation for Encrypt-then-MAC mode
This adds the OpenSSH HMACs that do encrypt then mac. This is a more
secure mode than the original HMAC. Newer AEAD ciphers like chacha20 and
AES-GCM are already encrypt-then-mac, but this also adds it for older
legacy clients that don't support those ciphers yet.

Signed-off-by: Dirkjan Bussink <d.bussink@gmail.com>
Reviewed-by: Jon Simons <jon@jonsimons.org>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
2019-02-22 15:31:08 +01:00
..
2016-02-03 09:01:29 +01:00
2009-05-04 22:30:21 +00:00
2010-05-17 20:08:11 +02:00
2019-01-22 13:12:25 +01:00
2008-03-17 02:31:22 +00:00
2018-10-19 17:42:55 +02:00
2009-11-05 18:18:35 +01:00
2008-03-17 02:31:22 +00:00