Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Encryption Algorithm des-cbc@ssh.com

See original GitHub issue

I’m using ssh-audit --lookup= to look up information on all the supported algorithms (encryption ciphers, key exchange, host key and MAC) in WinSCP 5.17.7.

A list of WinSCP’s supported algorithms can be produced using the command: "C:\Program Files (x86)\WinSCP\WinSCP.com" /info.

There is one algorithm supported by WinSCP that’s not present in the ssh-audit database which is the encryption algorithm des-cbc@ssh.com.

A comment in the WinSCP source code suggests that des-cbc and des-cbc@ssh.com are the same thing: /* Same as ssh_des_cbc, but with a different SSH-2 ID */, see: https://github.com/winscp/winscp/blob/master/source/putty/sshdes.c#L693-L704

The SSH-2 ID referred to in the comment relates to the ninth property of an ssh_cipheralg struct:

ssh_cipheralg

The ssh-audit database already contains des-cbc, do you have any objection to adding des-cbc@ssh.com so it’s possible to run a complete audit of WinSCP?

Issue Analytics

State:
Created 3 years ago
Comments:5 (5 by maintainers)

Top GitHub Comments

2reactions

jtestacommented, Sep 29, 2020

Done! I wasn’t going to rush in and steal it from you, but since you asked… 😉

0reactions

thecliguycommented, Sep 29, 2020

OK, that’s fair enough. Do you need a PR for this or will you add des-cbc@ssh.com the next time you commit to master?

Top Results From Across the Web

wodSFTP help - EncryptionList

Determines list of encryption algorithms supported and offered by wodSFTP. ... -cbc,rijndael256-cbc,rijndael-cbc@lysator.liu.se,des-cbc,des-cbc@ssh.com

Types of Encryption Algorithms - Venafi

Encryption algorithms are a specific method of cryptography that allows us to encode information for authorized users only.

SSH Algorithms - WinSCP

WinSCP supports the following algorithms with SSH. ... blowfish-cbc, 3des-ctr, 3des-cbc, arcfour256, arcfour128, des-cbc, des-cbc@ssh.com.

Choose an Encryption Algorithm - SQL Server - Microsoft Learn

Use this guidance to choose an encryption algorithm to help secure an instance of SQL Server, which supports several common algorithms.

What is encryption? | Types of encryption - Cloudflare

What is a key in cryptography? A cryptographic key is a string of characters used within an encryption algorithm for altering data so...