Re: sshd for windows

["Adam Newhard" <atnewhard () microstrain com>]

3DES is 168 bit or 112 bit.  I don't know the implementation of 3des in sshd
so you can yell at me if you'd like.  now for my obvious statement (there's
gotta be 1 person who doesn't know how 3DES works): 3des does
encryption->decryption->encryption.  when it's 168 bit, it's really 3 56 bit
keys (which are really 64 bits; 8 of which are parity...bit 7, 15,
23,...with lsb starting at 0).  112 bit is 2 keys, k1 does both encryption
steps and k2 does the decryption...also really 128 bits long, but 16 bits of
parity.  any mistakes, correct me b/c i won't get it right otherwise.
adam
----------------------------------------------------
Adam Newhard
Microstrain, Inc.
If vegetarians eat vegetables, watch out for humanitarians

----- Original Message ----- 
From: "DeGennaro, Gregory" <Gregory_DeGennaro () csaa com>
To: "Depp, Dennis M." <deppdm () ornl gov>; "Derek Perry"
<gte274v () mail gatech edu>; <security-basics () securityfocus com>
Sent: Tuesday, June 17, 2003 4:36 PM
Subject: RE: sshd for windows


> BTW - 3DES is 168 bit
>
>
> -----Original Message-----
> From: Depp, Dennis M. [mailto:deppdm () ornl gov]
> Sent: Tuesday, June 17, 2003 1:19 PM
> To: DeGennaro, Gregory; Derek Perry; security-basics () securityfocus com
> Subject: RE: sshd for windows
>
> Greg,
>
> But the traffic is encrypted using a 128-bit encryption key, the
> software comes with Windows 2000 server and is fully supported by the
> vendor and it meets the users requirement of providing remote access.
>
> Dennis
>
> > -----Original Message-----
> > From: DeGennaro, Gregory [mailto:Gregory_DeGennaro () csaa com]
> > Sent: Tuesday, June 17, 2003 4:13 PM
> > To: Depp, Dennis M.; Derek Perry; security-basics () securityfocus com
> >
> > Traffic is not encrypted in 3DES or AES.
> >
> > OpenSSH and Winssh are proven products.
> >
> > Regards,
> >
> > Greg DeGennaro Jr., CCNP
> > Security Analyst
> > 415-551-5462
> > 415-317-2119
> >
> >
> > -----Original Message-----
> > From: Depp, Dennis M. [mailto:deppdm () ornl gov]
> > Sent: Tuesday, June 17, 2003 9:16 AM
> > To: Derek Perry; security-basics () securityfocus com
> > Subject: RE: sshd for windows
> >
> > Why not use Remote Destop Connection?  It comes with Windows 2000.
> >
> > Dennis
> >
> > > -----Original Message-----
> > > From: Derek Perry [mailto:gte274v () mail gatech edu]
> > > Sent: Monday, June 16, 2003 9:30 PM
> > > To: security-basics () securityfocus com
> > >
> > > Is there a sshd for Windows (W2K Server is the actual OS)
> > > that is freely
> > > available?  I am doing a senior design project for a class at
> > > school and I
> > > would like a way to log in remotely to the server at the
> > > company which I am
> > > working with (the network admin hasnt even done the security
> > > updates on the
> > > webserver, so he is hopeless).  Thanks in advance!
> > >
> > > --
> > > Derek A. Perry
> > > derek () cc gatech edu
> > >
> > >
> > > --------------------------------------------------------------
> > > -------------
> > > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by
> > > top analysts!
> > > The Gartner Group just put Neoteris in the top of its Magic
> > Quadrant,
> > > while InStat has confirmed Neoteris as the leader in marketshare.
> > >
> > > Find out why, and see how you can get plug-n-play secure
> > > remote access in
> > > about an hour, with no client, server changes, or ongoing
> > maintenance.
> > > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> > > --------------------------------------------------------------
> > > --------------
> >
> > --------------------------------------------------------------
> > -------------
> > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by
> > top analysts!
> > The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> > while InStat has confirmed Neoteris as the leader in marketshare.
> >
> > Find out why, and see how you can get plug-n-play secure
> > remote access in
> > about an hour, with no client, server changes, or ongoing maintenance.
> >
> > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> > --------------------------------------------------------------
> > --------------
>
> --------------------------------------------------------------------------
-
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>
> Find out why, and see how you can get plug-n-play secure remote access in
> about an hour, with no client, server changes, or ongoing maintenance.
>
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------