Novel Terrapin attack uses prefix truncation to downgrade the security of SSH channels.
  • Synthead@lemmy.worldEnglish
    66·
    11 months ago

    ChaCha20-Poly1305 and CBC with Encrypt-then-MAC ciphers are vulnerable to a MITM attack.

    Saved you a click.

    • NateNate60@lemmy.world
      1·
      11 months ago

      I thought most SSH servers default to some AES-based cypher like most other programs. Is that not the case?