Novel Terrapin attack uses prefix truncation to downgrade the security of SSH channels.
  • netburnrEnglish
    44•7 months ago

    [For Terrapin to be viable, the connection it interferes with also must be secured by either “ChaCha20-Poly1305” or “CBC with Encrypt-then-MAC,” both of which are cipher modes added to the SSH protocol (in 2013 and 2012, respectively

    Well thats easy then, just change your allowed ciphers.