[ssh.1]
     document cipher des for protocol 1; ok deraadt@
This commit is contained in:
Ben Lindstrom 2001-09-12 16:52:28 +00:00
parent 044274bcb0
commit ffa1dd6817
2 changed files with 25 additions and 9 deletions

View File

@ -19,6 +19,9 @@
- stevesk@cvs.openbsd.org 2001/08/22 16:30:02 - stevesk@cvs.openbsd.org 2001/08/22 16:30:02
[sshd.8] [sshd.8]
no rexd; ok markus@ no rexd; ok markus@
- stevesk@cvs.openbsd.org 2001/08/22 17:45:16
[ssh.1]
document cipher des for protocol 1; ok deraadt@
20010815 20010815
- (bal) Fixed stray code in readconf.c that went in by mistake. - (bal) Fixed stray code in readconf.c that went in by mistake.
@ -6342,4 +6345,4 @@
- Wrote replacements for strlcpy and mkdtemp - Wrote replacements for strlcpy and mkdtemp
- Released 1.0pre1 - Released 1.0pre1
$Id: ChangeLog,v 1.1490 2001/09/12 16:46:08 mouring Exp $ $Id: ChangeLog,v 1.1491 2001/09/12 16:52:28 mouring Exp $

29
ssh.1
View File

@ -34,7 +34,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: ssh.1,v 1.130 2001/08/22 16:21:21 stevesk Exp $ .\" $OpenBSD: ssh.1,v 1.131 2001/08/22 17:45:16 stevesk Exp $
.Dd September 25, 1999 .Dd September 25, 1999
.Dt SSH 1 .Dt SSH 1
.Os .Os
@ -389,20 +389,24 @@ This can also be specified on a per-host basis in a configuration file.
.It Fl b Ar bind_address .It Fl b Ar bind_address
Specify the interface to transmit from on machines with multiple Specify the interface to transmit from on machines with multiple
interfaces or aliased addresses. interfaces or aliased addresses.
.It Fl c Ar blowfish|3des .It Fl c Ar blowfish|3des|des
Selects the cipher to use for encrypting the session. Selects the cipher to use for encrypting the session.
.Ar 3des .Ar 3des
is used by default. is used by default.
It is believed to be secure. It is believed to be secure.
.Ar 3des .Ar 3des
(triple-des) is an encrypt-decrypt-encrypt triple with three different keys. (triple-des) is an encrypt-decrypt-encrypt triple with three different keys.
It is presumably more secure than the
.Ar des
cipher which is no longer fully supported in
.Nm ssh .
.Ar blowfish .Ar blowfish
is a fast block cipher, it appears very secure and is much faster than is a fast block cipher, it appears very secure and is much faster than
.Ar 3des . .Ar 3des .
.Ar des
is only supported in the
.Nm
client for interoperability with legacy protocol 1 implementations
that do not support the
.Ar 3des
cipher. Its use is strongly discouraged due to cryptographic
weaknesses.
.It Fl c Ar cipher_spec .It Fl c Ar cipher_spec
Additionally, for protocol version 2 a comma-separated list of ciphers can Additionally, for protocol version 2 a comma-separated list of ciphers can
be specified in order of preference. be specified in order of preference.
@ -714,10 +718,19 @@ The default is
Specifies the cipher to use for encrypting the session Specifies the cipher to use for encrypting the session
in protocol version 1. in protocol version 1.
Currently, Currently,
.Dq blowfish .Dq blowfish ,
.Dq 3des ,
and and
.Dq 3des .Dq des
are supported. are supported.
.Ar des
is only supported in the
.Nm
client for interoperability with legacy protocol 1 implementations
that do not support the
.Ar 3des
cipher. Its use is strongly discouraged due to cryptographic
weaknesses.
The default is The default is
.Dq 3des . .Dq 3des .
.It Cm Ciphers .It Cm Ciphers