From owner-freebsd-security@FreeBSD.ORG  Tue Jan 27 10:21:32 2015
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 1033)
 id A7CAFB39; Tue, 27 Jan 2015 10:21:32 +0000 (UTC)
Date: Tue, 27 Jan 2015 10:21:32 +0000
From: Alexey Dokuchaev <danfe@FreeBSD.org>
To: Benjamin Kaduk <kaduk@MIT.EDU>
Subject: Re: Securing SSH
Message-ID: <20150127102132.GA42413@FreeBSD.org>
References: <alpine.BSF.2.11.1501111913310.9102@angus.tharned.org>
 <54B32FC8.1080000@FreeBSD.org>
 <alpine.GSO.1.10.1501112122400.23489@multics.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <alpine.GSO.1.10.1501112122400.23489@multics.mit.edu>
User-Agent: Mutt/1.5.23 (2014-03-12)
X-Mailman-Approved-At: Tue, 27 Jan 2015 12:34:02 +0000
Cc: Greg Rivers <gcr+freebsd-security@tharned.org>,
 Jonathan Anderson <jonathan@freebsd.org>, freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jan 2015 10:21:32 -0000

On Sun, Jan 11, 2015 at 09:23:25PM -0500, Benjamin Kaduk wrote:
> The author also appears to not understand the difference between
> single-DES and triple-DES, so I would expect the value of that posting to
> be only as a brainstormed list of ideas to consider for further analysis.

Right, original article does contain a few embarrassing mistakes, so it's
better to discuss a follow up (albeit written in Russian, should be easily
translated by Google or your favorite translation service):

	http://www.cypherpunks.ru/articles/securing_ssh.html

./danfe