Re: OpenSSH Using NONE as Cipher?

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 12/10/03


Date: Wed, 10 Dec 2003 20:59:58 GMT

In article <cb71bb60.0312100744.62bd31c0@posting.google.com>,
maldrich <maldrich12@hotmail.com> wrote:
>Hi,
>I am trying to use secure copy from one UNIX machine to another. scp
>is slow due to the encryption provided by ssh. I downloaded 3.7 and
>configured with the --with-none option, although when I try to pass
>the option, I get:
>No valid ciphers for protocol version 2 given, using defaults.

OpenSSH doesn't support --with-none (it's not in configure.ac and from
a quick grep of CVS, it doesn't seem to have ever been).

How slow is "too slow"? I can get ~700KB/s scp'ing to and from my old
170MHz SparcStation (although the CPU is the bottleneck here).

Some suggestions for speeding it up:
1) Use a fast cipher, eg blowfish or aes. The default v1 cipher is 3des
   which is relatively slow.
2) Try enabling/disabling compression. On fast networks, compression is
   normally slower.
3) Try recompiling OpenSSH, OpenSSL and zlib with different compiler
   flags. In some cases this can make a difference (eg gcc -mv8 makes a
   significant difference on a SPARC).

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


Relevant Pages

  • Re: ssh without encryption (authentification only)?
    ... You want a "null cipher" for the data transport after authentication. ... so the data encryption would be expendable. ... The machines in question run different versions of openssh ...
    (SSH)
  • Re: tcsetpgrp()
    ... Which SSH implementation and version thereof are you running? ... On QNX the pty allocation process apparently ... In the next release of OpenSSH, ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: SSH Connecting through Firewall
    ... >client to use HTTPS or FTP proxy. ... There is no such option in the OpenSSH ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: Adding "X11UseLocalhost no" to /etc/ssh/sshd_config breaks x forwarding
    ... telnet: Unable to connect to remote host: Connection refused ... has been turned off either by Openssh or by Red Hat. ... feature or a bug I am unsure, there are warnings in the man page ... Good judgement comes with experience. ...
    (SSH)
  • Re: Solaris 9 sshd<---> Cygwin/X ssh Problems
    ... >uses a Solaris box as an sshd server? ... I don't know if this exists in SunSSH but for OpenSSH this can be caused ... Good judgement comes with experience. ...
    (comp.security.ssh)