API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 4344
[ACTIVE]

The Secure Shell (SSH) Transport Layer Encryption Modes

Metadata

Publisher
IETF
Doc Type
Standard
Pages
12
Abstract
Researchers have discovered that the authenticated encryption portion of the current SSH Transport Protocol is vulnerable to several attacks. This document describes new symmetric encryption methods for the Secure Shell (SSH) Transport Protocol and gives specific recommendations on how frequently SSH implementations should rekey. [STANDARDS-TRACK]
Publication Date
2006-01-01
Status Note
Proposed Standard
DOI
10.17487/RFC4344
Link
https://doi.org/10.17487/RFC4344
Author(s)
Mihir Bellare
Tadayoshi Kohno
Chanathip Namprempre
Latest version of IETF RFC 4344

Document Versions — IETF RFC 4344

  • ▶ IETF RFC 4344 (2006-01-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

  • ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
  • NIST FIPS 46-3 [Withdrawn]
  • NIST FIPS 197 [Superseded]
  • Anderson, R., Biham, E., and Knudsen, L., "Serpent: A proposal for the Advanced Encryption Standard", NIST AES Proposal, 1998. EXTERNAL
  • Schneier, B., et al., "The Twofish Encryptions Algorithm: A 128-bit block cipher, 1st Edition", Wiley, 1999. EXTERNAL
  • IETF RFC 2119 [Active*]
  • IETF RFC 2144 [Active*]
  • IETF RFC 4250 [Active*]
  • IETF RFC 4251 [Active*]
  • IETF RFC 4253 [Active*]

Bibliographic Reference(s)

  • Bellare, M., Kohno, T., and Namprempre, C., "Authenticated Encryption in SSH: Provably Fixing the SSH Binary Packet Protocol", Ninth ACM Conference on Computer and Communications Security, 2002. EXTERNAL
  • Bellare, M., Kohno, T., and Namprempre, C., "Breaking and Provably Repairing the SSH Authenticated Encryption Scheme: A Case Study of the Encode-then-Encrypt-and-MAC Paradigm", ACM Transactions on Information and System Security, 7(2), May 2004. EXTERNAL
  • Dai, W., "An Attack Against SSH2 Protocol", Email to the ietf-ssh@netbsd.org email list, 2002. EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4344.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 4344, The Secure Shell (SSH) Transport Layer Encryption Modes. Available at https://doi.org/10.17487/RFC4344
Snippet:
IETF RFC 4344, The Secure Shell (SSH) Transport Layer Encryption Modes. Available at https://doi.org/10.17487/RFC4344

HTML (ISO 690 compliant)

Preview:
IETF RFC 4344, The Secure Shell (SSH) Transport Layer Encryption Modes. Available at https://doi.org/10.17487/RFC4344
Snippet:
<span class="citation"><cite>IETF RFC 4344</cite>, The Secure Shell (SSH) Transport Layer Encryption Modes. Available at <a href="https://doi.org/10.17487/RFC4344" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4344</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 4344, The Secure Shell (SSH) Transport Layer Encryption Modes
doi: 10.17487/RFC4344
url: https://doi.org/10.17487/RFC4344
Snippet:
<li>
<cite id="bib-rfc4344">IETF RFC 4344</cite>, The Secure Shell (SSH) Transport Layer Encryption Modes
<span class="doi">10.17487/RFC4344</span>
</li>

Referenced By