OpenSolaris

Printable Version Enter a New Search
Bug ID 6617424
Synopsis aes192/aes256 support is missing from ssh/sshd
State 10-Fix Delivered (Fix available in build)
Category:Subcategory ssh:commands
Keywords
Responsible Engineer Jan Pechanec
Reported Against s10
Duplicate Of
Introduced In solaris_9
Commit to Fix snv_87
Fixed In snv_87
Release Fixed solaris_nevada(snv_87) , solaris_10u8(s10u8_01) (Bug ID:2166325)
Related Bugs 6282914 , 6313328 , 6498066 , 6673795 , 6674019 , 6677876 , 6850734
Submit Date 16-October-2007
Last Update Date 17-November-2008
Description 
support for AES256/AES192 is there it's just not enabled:

$ ssh -c aes256-cbc localhost
Unknown cipher type 'aes256-cbc'

that same stands for aes(192|256)_ctr

SOLARIS_SSH_ENABLE_AES192 and SOLARIS_SSH_ENABLE_AES256 macros are checked in libssh/common/cipher.c. These macros are not defined so AES 192/256 is not included in the cipher table.

After SUNWcry* packages removal we should just include those ciphers back there.
Work Around 
N/A
Comments 
N/A