-
Improvement
-
Resolution: Fixed
-
Major
-
None
The cipher code in trilead-ssh2 is full of redundant implementations for ciphers included in the JDK. These implementations are also problematic as they are all pure software implementations of notoriously difficult to implement correctly ciphers. The existing cryptographic primitives should be deprecated, and trilead-ssh2 should be updated to use the standard javax.crypto.Cipher API which uses appropriate implementations that are kept up to date with the JDK.
- links to