From owner-freebsd-security Sat Nov 25 13:11: 9 2000 Delivered-To: freebsd-security@freebsd.org Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177]) by hub.freebsd.org (Postfix) with ESMTP id D610437B4C5; Sat, 25 Nov 2000 13:11:07 -0800 (PST) Received: (from kris@localhost) by citusc17.usc.edu (8.11.1/8.11.1) id eAPLC5M04775; Sat, 25 Nov 2000 13:12:05 -0800 (PST) (envelope-from kris) Date: Sat, 25 Nov 2000 13:12:05 -0800 From: Kris Kennaway To: Boris Cc: "Brian F. Feldman" , security@FreeBSD.ORG Subject: Re: OpenSSH 2.3.0 pre-upgrade Message-ID: <20001125131205.A4706@citusc17.usc.edu> References: <200011242328.eAONSJ560421@green.dyndns.org> <20001124153307.A71713@citusc17.usc.edu> <7885578635.20001125110504@x-itec.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="NzB8fVQJ5HfG6fxh" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <7885578635.20001125110504@x-itec.de>; from koester@x-itec.de on Sat, Nov 25, 2000 at 11:05:04AM -0800 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --NzB8fVQJ5HfG6fxh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sat, Nov 25, 2000 at 11:05:04AM -0800, Boris wrote: > How to recreate these numbers? I do not like static factors for > encryption, they are always a security risc Read about Diffie-Hellman. It is not a security risk. Kris --NzB8fVQJ5HfG6fxh Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjogKyUACgkQWry0BWjoQKUwgQCePUuaI2HQNfotb/VrAMygq0LA rDMAniMMOFOb2k66/EuXUX818bjvtD6A =mVm8 -----END PGP SIGNATURE----- --NzB8fVQJ5HfG6fxh-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message