Narrowed list of allowed SSH ciphers
Details
| Detail name | Value |
|---|---|
| Changelog Number | 19211 |
| Type | Improvement |
| Status | Resolved |
| Fix Versions | Exasol 8.25.0 |
| Resolution Date | 2024-02-15 |
Improvement
The list of allowed Ciphers to SSH into COS has been narrowed to:
- aes128-ctr
- aes192-ctr
- aes256-ctr
- aes128-gcm@openssh.com
- aes256-gcm@openssh.com
This mitigates/fixes/avoids the recently published terrapin attack (https://terrapin-attack.com/)
Changed behavior
To ssh into COS one may only use the following Ciphers: aes128-ctr, aes192-ctr, aes256-ctr,aes128-gcm@openssh.com, aes256-gcm@openssh.com
