summary: SSH 2.0.13 apparently doesn't have key-derivation bug class: bug: This is clearly an actual problem we want fixed. difficulty: fun: Just needs tuits, and not many of them. priority: medium: This should be fixed one day. present-in: 0.53 0.53b 2002-10-07 fixed-in: 2002-12-19 8cb52a26e14f86a9553000661c50a0ec95c34ae5 (0.54)
Apparently, while PuTTY believes that SSH 2.0.* have the SSH-2 key-derivation
bug, 2.0.13 (host OS/hardware not specified) doesn't, and this causes
the expected decryption failures. The current OpenSSH code suggests that
the bug is only present in versions before SSH 2.0.11.