PuTTY bug ssh2-keyderive-nonbug

This is a mirror. The primary PuTTY web site can be found here.

summary: SSH 2.0.13 apparently doesn't have key-derivation bug
class: bug: This is clearly an actual problem we want fixed.
difficulty: fun: Just needs tuits, and not many of them.
priority: medium: This should be fixed one day.
present-in: 0.53 0.53b 2002-10-07
fixed-in: 2002-12-19 (0.54) (0.55) (0.56) (0.57) (0.58) (0.59) (0.60) (0.61) (0.62) (0.63) (0.64)

Apparently, while PuTTY believes that SSH 2.0.* have the SSH-2 key-derivation bug, 2.0.13 (host OS/hardware not specified) doesn't, and this causes the expected decryption failures. The current OpenSSH code suggests that the bug is only present in versions before SSH 2.0.11.

Ref: <[email protected]>

Workaround: change `Miscomputes SSH2 encryption keys' on the `Bugs' panel from `Auto' to `Off'.

Audit trail for this bug.

If you want to comment on this web site, see the Feedback page.
(last revision of this bug record was at 2005-03-10 16:36:42 +0000)