[Bug 1310781] Re: bad bignum encoding for curve25519-sha256 at libssh.org
Omega Weapon
1310781 at bugs.launchpad.net
Wed May 14 14:01:13 UTC 2014
Sorry for the delay - I have enabled proposed and can confirm forced
curve25519-sha256 at libssh.org works now :)
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1310781
Title:
bad bignum encoding for curve25519-sha256 at libssh.org
Status in “openssh” package in Ubuntu:
Fix Released
Status in “openssh” source package in Trusty:
Fix Committed
Bug description:
[Impact] Occasional key exchange failure with ED25519.
[Test Case] I don't have a clear one, but perhaps attempting lots of connections to a fixed server would do it.
[Regression Potential] We should test with an unpatched server to make sure that it properly falls back to skipping that key exchange method.
There's an occasional (one in 512 or so) key exchange failure in the
curve25519-sha256 key exchange method, which affects OpenSSH 6.5 and
6.6. Upstream gives more details here and has recommended that
distributors apply this patch:
https://lists.mindrot.org/pipermail/openssh-unix-
dev/2014-April/032494.html
We should issue this as an update for trusty.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1310781/+subscriptions
More information about the foundations-bugs
mailing list