From: Martin Bosslet <redmine@...>
Date: 2011-02-19T10:50:55+09:00
Subject: [ruby-core:35308] [Ruby 1.9-Bug#4408] Net::SSH connections are subject to plaintext recovery due to lack of CTR mode

Issue #4408 has been updated by Martin Bosslet.


The Cipher class uses the OpenSSL EVP API, but if you look in the file evp.h in all available OpenSSL versions (including >= 1.0.0) you will find this:

#if 0
const EVP_CIPHER *EVP_aes_128_ctr(void);
#endif

As soon as this is supported by OpenSSL itself, it will also be available in Ruby's Cipher support.

Regards,
Martin
----------------------------------------
http://redmine.ruby-lang.org/issues/show/4408

----------------------------------------
http://redmine.ruby-lang.org