Skip to content

Refactor block-cipher packet-length probing to avoid unsafe state duplication - #706

Merged
Eugeny merged 2 commits into
Eugeny:mainfrom
mjc:fix/block-cipher-packet-length-unsoundness
May 16, 2026
Merged

Refactor block-cipher packet-length probing to avoid unsafe state duplication#706
Eugeny merged 2 commits into
Eugeny:mainfrom
mjc:fix/block-cipher-packet-length-unsoundness

Refactor block-cipher packet-length probing

e3d63e3
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded May 14, 2026 in 2s

No new alerts in code changed by this pull request

View all branch alerts.

Annotations

Check failure on line 343 in russh/src/cipher/block.rs

See this annotation in the file changed.

Code scanning / CodeQL

Hard-coded cryptographic value Critical

This hard-coded value is used as
an initialization vector
Loading
.
This hard-coded value is used as
an initialization vector
Loading
.

Check failure on line 117 in russh/src/cipher/cbc.rs

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic algorithm High

The cryptographic algorithm 3DES
Loading
is broken or weak, and should not be used.
The cryptographic algorithm DES
Loading
is broken or weak, and should not be used.

Check failure on line 121 in russh/src/cipher/cbc.rs

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic algorithm High

The cryptographic algorithm 3DES
Loading
is broken or weak, and should not be used.
The cryptographic algorithm DES
Loading
is broken or weak, and should not be used.