Subject: Paper on SSH

From: "Tadayoshi Kohno" <[email-masked]>
Date: Tue, 18 Jun 2002 18:56:56 -0700

As Wei Dai recently pointed out, the current SSH protocol is insecure
(because of problems with way CBC mode is used).

In the paper
        http://eprint.iacr.org/2002/078/
Mihir Bellare, Chanathip Namprempre, and I show how to provably fix
the SSH protocol.  We have placed a summary of our recommendations at
        http://www-cse.ucsd.edu/users/tkohno/papers/SSH/sshadvice.html

We hope that our provable security results will be of use to the IETF
SSH Working Group.

Yoshi