ssh: remove chacha20-poly1305 from preferredCipher list

This effectively disables the cipher. Add a test against OpenSSH which sends larger packets through the tested ciphers. This reproduces the problem reported in golang/go#23510 Change-Id: I4b124c690c409c6a0af2621e58a964ff55815f57 Reviewed-on: https://go-review.googlesource.com/88995 Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Adam Langley <agl@golang.org>
2018-01-22 20:00:59 +00:00
parent 39efaea5da
commit 31469a2049
2 changed files with 39 additions and 13 deletions
@@ -38,7 +38,6 @@ var supportedCiphers = []string{
 var preferredCiphers = []string{
 	"aes128-ctr", "aes192-ctr", "aes256-ctr",
 	"aes128-gcm@openssh.com",
-	chacha20Poly1305ID,
 }

 // supportedKexAlgos specifies the supported key-exchange algorithms in