<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 16px; font-family: Garamond, sans-serif; color: rgb(0, 0, 128);">
<div>
<div style="color: rgb(0, 0, 128);">Hi Team,</div>
<div style="color: rgb(0, 0, 128);"><br>
</div>
<div style="color: rgb(0, 0, 128);"><span class="Apple-tab-span" style="white-space:pre"></span>Wanted to bring one code changes which is really required from twisted side otherwise it is not behaving as per RFC <span style="color: rgb(0, 0, 0); font-family: Garamond;">(rfc4253
Section 7.2)</span>, twisted is failing when we negotiate any kex algorithm based on SHA1 and we have MAC as hmac-sha2-512. The reason for the failure was the below code</div>
<div style="color: rgb(0, 0, 128);"><br>
</div>
<div>
<div style="font-family: Garamond;">
<div style="color: rgb(0, 0, 0);"><font color="#ff0000"><span class="Apple-tab-span" style="white-space:pre"></span>hashProcessor = _kex.getHashProcessor(self.kexAlg)</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#ff0000"> k1 = hashProcessor(sharedSecret + exchangeHash + c + self.sessionID)</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#ff0000"> k1 = k1.digest()</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#ff0000"> k2 = hashProcessor(sharedSecret + exchangeHash + k1).digest()</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#ff0000"><span class="Apple-tab-span" style="white-space: pre;"></span><span class="Apple-tab-span" style="white-space:pre"></span>return k1 + k2</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#ff0000"><br>
</font></div>
<div>For SHA512 we need 64 byte key and if the Kex is based on SHA1 then it will only generate 40 byte key and that induce a failure. So we need to modify the code as below to make it generic and make it comply with RFC <span style="color: rgb(0, 0, 0);">(rfc4253
Section 7.2). So that twisted can work irrespective of what kex is been used. Actual code should plot in is like below</span></div>
<div><span style="color: rgb(0, 0, 0);"><br>
</span></div>
<div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"><span class="Apple-tab-span" style="white-space:pre"></span>hashProcessor = _kex.getHashProcessor(self.kexAlg)</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"> k1 = hashProcessor(sharedSecret + exchangeHash + c + self.sessionID)</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"> k1 = k1.digest()</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"> k2 = hashProcessor(sharedSecret + exchangeHash + k1).digest()</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"><span class="Apple-tab-span" style="white-space: pre;"></span><span class="Apple-tab-span" style="white-space:pre"></span>k3 = hashProcessor(sharedSecret + exchangeHash + k1 + k2).digest()</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"><span class="Apple-tab-span" style="white-space: pre;"></span><span class="Apple-tab-span" style="white-space:pre"></span>k4 = hashProcessor(sharedSecret + exchangeHash + k1 + k2 + k3).digest()</font></div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"><span class="Apple-tab-span" style="white-space: pre;"></span><span class="Apple-tab-span" style="white-space:pre"></span>return k1 + k2 + k3 + k4</font></div>
</div>
<div style="color: rgb(0, 0, 0);"><font color="#007f00"><br>
</font></div>
<div style="color: rgb(0, 0, 0);">Can somebody help me to plot this fix so that twisted will work fine with all the other servers out there and even make it comply to the RFC. Thanks in advance and this will be my first findings on twisted code ;). Please let
me know in case of any doubt on the same. Code changes should be plotted in to the routine _getKey, file name is src/twisted/conch/ssh/transport.py . Please help me with this commit team.</div>
<div style="color: rgb(0, 0, 0);"><br>
</div>
</div>
</div>
<div style="color: rgb(0, 0, 128);"><br>
</div>
<div style="color: rgb(0, 0, 128);">
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: medium; font-family: 'Times New Roman', serif; ">
</p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; line-height: 20px; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "><font face="Garamond">Thanks,<o:p></o:p></font></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; line-height: 20px; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "><font face="Garamond">Jabir<o:p></o:p></font></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; line-height: 20px; font-family: Calibri, sans-serif; ">
<span lang="EN" style="font-size: 10pt; color: rgb(31, 73, 125); "><font face="Garamond"> \|/<o:p></o:p></font></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; line-height: 20px; font-family: Calibri, sans-serif; ">
<span lang="EN" style="font-size: 10pt; color: rgb(31, 73, 125); "><font face="Garamond"> -------<o:p></o:p></font></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; line-height: 20px; font-family: Calibri, sans-serif; ">
<span lang="EN" style="font-size: 10pt; color: rgb(31, 73, 125); "><font face="Garamond"> ( o o )<o:p></o:p></font></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; line-height: 20px; font-family: Calibri, sans-serif; ">
<span lang="EN" style="font-size: 10pt; color: rgb(31, 73, 125); "><font face="Garamond">oooO---O---Oooonull</font></span></p>
<p></p>
</div>
</div>
<div style="color: rgb(0, 0, 128);"><br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 128);">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Alex Gaynor <<a href="mailto:alex.gaynor@gmail.com">alex.gaynor@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, 1 March 2017 9:26 am<br>
<span style="font-weight:bold">To: </span>jabir mohammed <<a href="mailto:jamohamm@cisco.com">jamohamm@cisco.com</a>><br>
<span style="font-weight:bold">Cc: </span>Itamar Turner-Trauring <<a href="mailto:itamar@itamarst.org">itamar@itamarst.org</a>>, "<a href="mailto:security@twistedmatrix.com">security@twistedmatrix.com</a>" <<a href="mailto:security@twistedmatrix.com">security@twistedmatrix.com</a>><br>
<span style="font-weight:bold">Subject: </span>Re: Regarding the SHA 512 support in twisted.<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">This doesn't appear to be a security issue. You can file an issue on the public tracker.<br>
<div><br>
</div>
<div>Alex</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Feb 28, 2017 at 10:54 PM, jabir Mohammed (jamohamm)
<span dir="ltr"><<a href="mailto:jamohamm@cisco.com" target="_blank">jamohamm@cisco.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">
<div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px"><br>
</div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px"><span class="m_8053753554963472666Apple-tab-span" style="white-space:pre-wrap"></span>Thanks Alex for the response. In our server we added support of HMAC-SHA-512 and HMAC-SHA-256
support for MAC. When we try to negotiate this hmac with most of the other client like Paramiko, OpenSSH and other flavours of SSH its working fine. But we are seeing a problem with twisted client that too only with HMAC-SHA-512. We have a limitation from
our side to debug this since we don’t know what is happening from the client side. We have taken our derived key for the HMAC and as well as the input to derive the MAC using online tools and it matches with whatever we have generated but whatever is been
sent across the other Twisted side differs and we are closing the session. This is been tagged critical since most of the customers are migrating to Twisted and will be a deployment blocker for us.</div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px"><br>
</div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px">What we suspect is the key or the algorithm itself. Please see the snippet below</div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px"><br>
</div>
<div style="color:rgb(0,0,128)"><font face="Courier" style="font-size:14px">This is our inmac Key</font></div>
<div style="color:rgb(0,0,128)"><font face="Courier" style="font-size:14px">----------------------------</font></div>
<div><font face="Courier" style="font-size:14px"><span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: ssh_integrity_check: inmac.key</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0000" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0000</a> - a5 cb a5 bb 4c 34 a7
bf-95 e9 00 23 1e 09 17 0c <span class="m_8053753554963472666Apple-converted-space"> </span>....L4.....#....</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0010" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0010</a> - 1c e1 3f d9 a7 42 d9
87-54 23 64 16 e5 e2 c3 76 <span class="m_8053753554963472666Apple-converted-space"> </span>..?..B..T#d....v</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0020" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0020</a> - 2a bc 53 c6 85 78 81
eb-e4 3e fb f7 cc a3 1f 6e <span class="m_8053753554963472666Apple-converted-space"> </span>*.S..x...>.....n</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0030" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0030</a> - d9 a5 0e 73 d0 44 79
a9-d3 19 32 3b 26 92 bb 70 <span class="m_8053753554963472666Apple-converted-space"> </span>...<a href="http://s.Dy...2;&..p" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">s.Dy...2;&..p</a></span></font></div>
<div><font face="Courier" style="font-size:14px"><br>
</font></div>
<div><font face="Courier" style="font-size:14px">This is our input data to the hmac-sha-512</font></div>
<div><font face="Courier" style="font-size:14px">------------------------------<wbr>-----------------------</font></div>
<div><font face="Courier" style="font-size:14px"><span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: ssh_integrity_check: input.data to HMAC API</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0000" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0000</a> - 00 00 00 03 00 00 00
1c-0a 05 00 00 00 0c 73 73 <span class="m_8053753554963472666Apple-converted-space"> </span>..............ss</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0010" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0010</a> - 68 2d 75 73 65 72 61
75-74 68 64 de 66 fb ab 31 <span class="m_8053753554963472666Apple-converted-space"> </span>h-userauthd.f..1</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0020" style="font-style:inherit;font-variant:inherit;line-height:inherit;color:rgb(0,175,250);text-decoration:none" target="_blank">0020</a> - ba 7e 56 e5
<span class="m_8053753554963472666Apple-converted-space"> </span>.~V.</span></font></div>
<div><font face="Courier" style="font-size:14px"><br>
</font></div>
<div><font face="Courier" style="font-size:14px" color="#ff0000">The digest which is been sent from the twisted client side(Red)</font></div>
<div><font face="Courier" style="font-size:14px" color="#ff0000">------------------------------<wbr>------------------------------<wbr>-----------<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: ssh_integrity_check: digest<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.895 : SSHD_[65795]: <a href="tel:0000" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0000</a> - 95 f7 99 27 48 28 35 da-62 92 0e 51 0f af 62 b1 <span class="m_8053753554963472666Apple-converted-space"> </span>...'H(5.b..Q..b.<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0010" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0010</a> - 93 d1 4d 46 5f d9 21 7a-b9 fb 86 b6 6e 00 a3 aa <span class="m_8053753554963472666Apple-converted-space"> </span>..MF_.!z....n...<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0020" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0020</a> - 84 a9 58 60 5e 1c 86 98-b4 1f 00 40 d5 72 aa cf <span class="m_8053753554963472666Apple-converted-space"> </span>..X`^......@.r..<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0030" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0030</a> - 4b 1d 05 2d a4 68 96 9c-7b c7 9d 83 1d c2 1d 5b <span class="m_8053753554963472666Apple-converted-space"> </span>K..-.h..{……[</font></div>
<div><font face="Courier" style="font-size:14px"><br>
</font></div>
<div><font face="Courier" style="font-size:14px" color="#007f00">The digest which got created from our side using the same key and input data mentioned above(Green)</font></div>
<div><font face="Courier" style="font-size:14px" color="#007f00">——————————————————————————————<wbr>——————————————————————————————<wbr>———</font></div>
<div><font face="Courier" style="font-size:14px" color="#007f00">RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0000" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0000</a> - 36 36
5c 6e 2d be f1 d8-ae 4f 5a 72 30 2d 25 c0 <span class="m_8053753554963472666Apple-converted-space"> </span>66\n-....OZr0-%.<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0010" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0010</a> - 0e e8 d6 96 6e 10 38 af-65 15 51 ff a7 ca 7d b4 <span class="m_8053753554963472666Apple-converted-space"> </span>....n.8.e.Q...}.<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0020" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0020</a> - 7c c8 15 b8 5a 9b 5e c4-b5 ac 4c 51 7e de 77 41 <span class="m_8053753554963472666Apple-converted-space"> </span>|...Z.^...LQ~.wA<br>
RP/0/RSP0/CPU0:Feb 23 18:12:43.896 : SSHD_[65795]: <a href="tel:0030" style="font-style:inherit;font-variant:inherit;line-height:inherit;text-decoration:none" target="_blank">0030</a> - 32 63 61 5e f5 1a 31 d1-f7 89 d0 0b 11 3c 48 f6 <span class="m_8053753554963472666Apple-converted-space"> </span>2ca^..1......<H.</font></div>
<div><font face="Courier" style="font-size:14px"><br>
</font></div>
<div><font face="Courier" style="font-size:14px">If you see the details this is the useauth first packet and we are not able to proceed because of the failure. We used online tool to do this calculation and we are getting the same output as what we generated
so the one marked as red is creating problem.So the root cause could be either the key which is been derived or the algorithm so to debug that we need to enable details logging from client side. We can share the details with respective engineer and show what
we are facing. Please help. </font></div>
<div><font face="Courier" style="font-size:14px"><br>
</font></div>
<div><font face="Courier"><span style="font-size:14px">Online tool which we used to check our algorithm is: which result in same MAC marked as green. </span></font></div>
<div><font face="Courier"><span style="font-size:14px"><br>
</span></font></div>
<div><a href="https://www.liavaag.org/English/SHA-Generator/HMAC/" target="_blank">https://www.liavaag.org/<wbr>English/SHA-Generator/HMAC/</a></div>
<span class="">
<div><br>
</div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px"><span style="color:rgb(0,0,0);font-family:Helvetica;font-size:14px"><br>
</span></div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:medium;font-family:'Times New Roman',serif">
</p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:20px;font-family:Calibri,sans-serif">
<span style="color:rgb(31,73,125)"><font face="Garamond">Thanks,<u></u><u></u></font></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:20px;font-family:Calibri,sans-serif">
<span style="color:rgb(31,73,125)"><font face="Garamond">Jabir<u></u><u></u></font></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:20px;font-family:Calibri,sans-serif">
<span lang="EN" style="font-size:10pt;color:rgb(31,73,125)"><font face="Garamond"> \|/<u></u><u></u></font></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:20px;font-family:Calibri,sans-serif">
<span lang="EN" style="font-size:10pt;color:rgb(31,73,125)"><font face="Garamond"> -------<u></u><u></u></font></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:20px;font-family:Calibri,sans-serif">
<span lang="EN" style="font-size:10pt;color:rgb(31,73,125)"><font face="Garamond"> ( o o )<u></u><u></u></font></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:20px;font-family:Calibri,sans-serif">
<span lang="EN" style="font-size:10pt;color:rgb(31,73,125)"><font face="Garamond">oooO---O---Oooonull</font></span></p>
<p></p>
</div>
</span></div>
<div style="color:rgb(0,0,128);font-family:Garamond,sans-serif;font-size:16px"><br>
</div>
<span id="m_8053753554963472666OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 128); font-family: Garamond, sans-serif; font-size: 16px;">
<div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;BORDER-BOTTOM:medium none;BORDER-LEFT:medium none;PADDING-BOTTOM:0in;PADDING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df 1pt solid;BORDER-RIGHT:medium none;PADDING-TOP:3pt">
<span style="font-weight:bold">From: </span>Alex Gaynor <<a href="mailto:alex.gaynor@gmail.com" target="_blank">alex.gaynor@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, 1 March 2017 6:39 am<br>
<span style="font-weight:bold">To: </span>Itamar Turner-Trauring <<a href="mailto:itamar@itamarst.org" target="_blank">itamar@itamarst.org</a>><br>
<span style="font-weight:bold">Cc: </span>jabir mohammed <<a href="mailto:jamohamm@cisco.com" target="_blank">jamohamm@cisco.com</a>>, "<a href="mailto:security@twistedmatrix.com" target="_blank">security@twistedmatrix.com</a>" <<a href="mailto:security@twistedmatrix.com" target="_blank">security@twistedmatrix.com</a>><br>
<span style="font-weight:bold">Subject: </span>Re: FW: Regarding the SHA 512 support in twisted.<br>
</div>
<div>
<div class="h5">
<div><br>
</div>
<div>
<div>
<div dir="ltr">Hi,
<div><br>
</div>
<div>I think I'm missing some context here, what part of twisted are you trying to use SHA-512 for a MAC with? It sounds like Conch? Can you show how I could reproduce the problem?</div>
<div><br>
</div>
<div>Alex</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Feb 28, 2017 at 8:06 PM, Itamar Turner-Trauring <span dir="ltr">
<<a href="mailto:itamar@itamarst.org" target="_blank">itamar@itamarst.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u></u>
<div>
<div>Hi,<br>
</div>
<div><br>
</div>
<div>Forwarding on to security contact to see if they think it's a security problem; otherwise you can probably just file a normal ticket.<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>On Tue, Feb 28, 2017, at 05:01 AM, jabir Mohammed (jamohamm) wrote:<br>
</div>
<blockquote type="cite">
<div>
<div>
<div>Hi Team,<br>
</div>
</div>
</div>
<div><span></span><br>
</div>
<div>
<div style="color:rgb(0,0,128);font-size:16px;font-family:Garamond,sans-serif">
<div><span></span><br>
</div>
<div><span><span style="white-space:pre-wrap"></span>Wanted to cross check on SHA 512 algorithm as MAC while using twisted. Few of our customers started using Twisted and even we are trying to incorporate some scripts via twisted client. But what we have noticed
is that when we negotiate SHA 512 MAC with twisted we always get a failure and other MAC algorithms are working fine with twisted. So wanted to cross check do we have any bug or any issue with SHA 512 and twisted and how we can debug this from twisted side.</span><br>
</div>
<div><span></span><br>
</div>
<div><span>We checked the same with other OpenSSH client and even paramiko things work perfectly fine so wanted to debug further from the twisted side. We checked with the same derived key and the output whatever we got from SHA 512 is what we are getting from
the online tool so we suspect something to do with the key or hash algorithm from the other side.</span><br>
</div>
<div><span></span><br>
</div>
<div><span>We used the twisted 16.6.0 version for testing, thanks in advance for looking in to this email.</span><br>
</div>
<div><span></span><br>
</div>
<div>
<p style="margin:0in 0in 0.0001pt"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:"Times New Roman",serif"><span class="m_8053753554963472666m_4760196534541218687size" style="font-size:medium"></span></span><br>
</p>
<p style="margin:0in 0in 0.0001pt;line-height:20px"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Calibri,sans-serif"><span><span class="m_8053753554963472666m_4760196534541218687colour" style="color:rgb(31,73,125)"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Garamond">Thanks,</span></span></span></span><br>
</p>
<p style="margin:0in 0in 0.0001pt;line-height:20px"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Calibri,sans-serif"><span><span class="m_8053753554963472666m_4760196534541218687colour" style="color:rgb(31,73,125)"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Garamond">Jabir</span></span></span></span><br>
</p>
<p style="margin:0in 0in 0.0001pt;line-height:20px"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Calibri,sans-serif"><span><span class="m_8053753554963472666m_4760196534541218687colour" style="color:rgb(31,73,125)"><span class="m_8053753554963472666m_4760196534541218687size" style="font-size:10pt"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Garamond">
\|/</span></span></span></span></span><br>
</p>
<p style="margin:0in 0in 0.0001pt;line-height:20px"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Calibri,sans-serif"><span><span class="m_8053753554963472666m_4760196534541218687colour" style="color:rgb(31,73,125)"><span class="m_8053753554963472666m_4760196534541218687size" style="font-size:10pt"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Garamond">
-------</span></span></span></span></span><br>
</p>
<p style="margin:0in 0in 0.0001pt;line-height:20px"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Calibri,sans-serif"><span><span class="m_8053753554963472666m_4760196534541218687colour" style="color:rgb(31,73,125)"><span class="m_8053753554963472666m_4760196534541218687size" style="font-size:10pt"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Garamond">
( o o )</span></span></span></span></span><br>
</p>
<p style="margin:0in 0in 0.0001pt;line-height:20px"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Calibri,sans-serif"><span><span class="m_8053753554963472666m_4760196534541218687colour" style="color:rgb(31,73,125)"><span class="m_8053753554963472666m_4760196534541218687size" style="font-size:10pt"><span class="m_8053753554963472666m_4760196534541218687font" style="font-family:Garamond">oooO---O---Oooonull</span></span></span></span></span><br>
</p>
<p><br>
</p>
</div>
</div>
</div>
<div><span></span><br>
</div>
</blockquote>
<div><br>
</div>
<div id="m_8053753554963472666m_4760196534541218687sig54095313">
<div class="m_8053753554963472666m_4760196534541218687signature">--<br>
</div>
<div class="m_8053753554963472666m_4760196534541218687signature">Itamar Turner-Trauring<br>
</div>
<div class="m_8053753554963472666m_4760196534541218687signature"><br>
</div>
</div>
<div><br>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="m_8053753554963472666gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">"I disapprove of what you say, but I will defend to the death your right to say it." -- Evelyn Beatrice Hall (summarizing Voltaire)<br>
"The people's good is the highest law." -- Cicero</div>
<div dir="ltr">GPG Key fingerprint: D1B3 ADC0 E023 8CA6<br>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</span></div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">"I disapprove of what you say, but I will defend to the death your right to say it." -- Evelyn Beatrice Hall (summarizing Voltaire)<br>
"The people's good is the highest law." -- Cicero</div>
<div dir="ltr">GPG Key fingerprint: D1B3 ADC0 E023 8CA6<br>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</span>
</body>
</html>