Re: Questions about using libssh as SFTP client

[Alan Ong <sarcasigan@xxxxxxxxx>]

Thank you for the quick reply.

Actually, our project specifications specifies aes128-ctr as cipher
method and sha1 as hashing algorithm.
I am just trying to implement the requirements specified.

So since hmac-sha1 is the only supported hmac, then it is the default
used, which means i would not have to code specific instructions to
use it.

Thank you. I have quite learned a lot from your reply.

On Tue, Aug 24, 2010 at 5:09 PM, Aris Adamantiadis <aris@xxxxxxxxxxxx> wrote:
> Hi Alan,
>
> Your code is correct. Have you specific reasons to use aes128-ctr ? by
> default, libssh will select the cipher from a list returned by the
> server, which may include more ciphers which have all been proven secure
> (well, a little less for the cbc ones).
> No option exists to change the hmac because currently the only supported
> hmac is hmac-sha1. This may change in the future, but we see no need to
> support the weaker hmac-md5.
>
> kr,
>
> Aris
>
> Le 24/08/10 10:46, Alan Ong a écrit :
>> Hello,
>>
>> I have another newbie questions. I am creating a sftp client and I
>> want to use aes128-ctr cipher.
>> Does it mean I have to code it like this:
>>
>> int nResult;
>> ssh_session session;
>>
>> session = ssh_new();
>> nResult = ssh_options_set(session, SSH_OPTIONS_HOST, "localhost");
>> nResult = ssh_options_set(session, SSH_OPTIONS_PORT, 22);
>> nResult = ssh_options_set(session, SSH_OPTIONS_CIPHERS_S_C, "aes128-ctr");
>> nResult = ssh_options_set(session, SSH_OPTIONS_CIPHERS_C_S, "aes128-ctr");'
>>
>> Is the above code correct?
>>
>> Another question is, how do i set in the code to use hmac-sha1?
>>
>> Thank you for your time.
>>
>
>
>