Re: SSH overhead.

From: Shashank Khanvilkar (shashank_at_evl.uic.edu)
Date: 06/27/03


Date: Fri, 27 Jun 2003 15:02:12 -0500

This is what i found out, but will appreciate a second opinion.

> When I send a packet of 100 bytes (say) using ssh, how much overhead bytes
> can I expect for ssh to add to my packet.
> I am assuming that I use public key encryption with following options:
> cipher: aes128-cbc
> mesage-digest: hmac-md5
> compression: none
> I know the crude technique of finding out how much overhead will each
> cipher+message digest algorithm will add. But I would like to know a more
> elegant technique (if any such exists).

The answere to the above questions is:
It depends:
The cipher algorithm that one uses to encrypt the 100 bytes of data will
produce upto 100 bytes of encrypted output, depending on
  a> the amount of randomness in the data
  b>whether the encryption algorithm is CBC, CFB, ECB or OFB.

I found that when i provide random input, the encrypted output has same 100
bytes,
but when the input 100 bytes has the same character (say, A), the encrypted
output was much less than 100 bytes (around 48 - 50 bytes).

The hash function (hmac-md5) will add 16 bytes to the above encrypted data.

Does the above make sense?
Will love to hear some comments
Shank

>
>
> Is the following correct:
> Application (100 bytes) --> ssh(??) --> TCP ((20 bytes basic + 12 bytes
> options = 32 bytes) --> IP (20 bytes) --> ethernet (14 bytes) --> packet
> sent over the wire.

>
>
>
> --
> Regards
> Shashank
> http://mia.ece.uic.edu/~papers
>
>



Relevant Pages

  • Re: New Encryption Idea
    ... performing the 5 reads necessary in the example algorithm results in a delay ... Panama at 400MB/sec, or RC4 at about 90MB/sec, or AES in CTR mode at ... and the speed failings of your design become very clear. ... > Manansala Encryption and Authentication System ...
    (sci.crypt)
  • Meganets "unbreakable" cryptography? Im skeptical.
    ... Meganet makes such grandiose claims that I can't help but ... There's plenty of coverage on secret encryption algorithms ... encryption algorithm that was granted U.S. Patent ... Labor has bought into this "snake oil" and without a doubt ...
    (sci.crypt)
  • Re: Enigma machine strenght using a computer
    ... cipher with rotors that spin backwards, forwards, stop and start based ... on other rotors, change their values according to the phase of the moon ... encryption less error-prone and they were a cost effective way to get ... case) than not since a wider base uses the same algorithm. ...
    (sci.crypt)
  • Re: Enigma machine strenght using a computer
    ... You're right that computers would allow us to implement an Enigma like ... cipher with rotors that spin backwards, forwards, stop and start based ... encryption less error-prone and they were a cost effective way to get ... I personally think this is a silly requirement, no one algorithm can be ...
    (sci.crypt)
  • Re: Enigma machine strenght using a computer
    ... cipher with rotors that spin backwards, forwards, stop and start based ... Is this a good way to get security on modern ... encryption less error-prone and they were a cost effective way to get ... I personally think this is a silly requirement, no one algorithm can be ...
    (sci.crypt)