Unify required crypto for ssh server and client

[arlimus]

Ciphers, Mac, and Kex diverge at a few points. Ideally they should be the same. Unify and verify on operating systems.

[arlimus]

We need to collect all the supported ciphers from the different versions and bettercrypto. Let's see where there's differences.

[arlimus]

Ubuntu 14.04, openssh-server/-client 1:6.6p1-2ubuntu1

Ciphers:

3des-cbc, aes128-cbc, aes192-cbc, aes256-cbc, aes128-ctr, aes192-ctr,
aes256-ctr, [email protected], [email protected], arcfour128, arcfour256,
arcfour, blowfish-cbc, cast128-cbc, [email protected]

MACs:

[email protected],[email protected],
[email protected],[email protected],
[email protected],[email protected], 
[email protected],[email protected], 
[email protected], hmac-md5,hmac-sha1,[email protected],
[email protected], hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,
hmac-sha1-96,hmac-md5-96

KEX:

[email protected], ecdh-sha2-nistp256,ecdh-sha2-nistp384,
ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256,
diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1, 
diffie-hellman-group1-sha1

[arlimus]

Ubuntu 12.04, openssh-server/-client 1:5.9p1-5ubuntu1.4

Ciphers:

aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, aes128-cbc,
3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc, aes256-cbc,arcfour

MACs:

hmac-md5,hmac-sha1,[email protected], hmac-ripemd160,
hmac-sha1-96,hmac-md5-96, hmac-sha2-256,hmac-sha256-96,
hmac-sha2-512, hmac-sha2-512-96

KEX:

ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521,
diffie-hellman-group-exchange-sha256, diffie-hellman-group-exchange-sha1,
diffie-hellman-group14-sha1, diffie-hellman-group1-sha1

[arlimus]

We currently test by bettercrypto'ish rules:

Ciphers:

aes128-ctr,aes256-ctr,aes192-ctr

aes128-ctr,aes256-ctr,aes192-ctr,aes128-cbc,aes256-cbc,aes192-cbc

MACs:

[email protected],[email protected],
[email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160

[email protected],[email protected],
[email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-sha1

hmac-ripemd160

KexAlgorithms:

diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,
diffie-hellman-group-exchange-sha1

diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1

[arlimus]

double-checked: bettercrypto does openssh 6.6 only

[arlimus]

RedHat 6.4-based use OpenSSH 5.3:

Ciphers:

aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,
aes256-cbc,arcfour

MACs

hmac-md5,hmac-sha1,[email protected],
hmac-ripemd160,hmac-sha1-96,hmac-md5-96

Kex: NONE! (invalid option)

[arlimus]

Add Oracle 6.4/6.5 to the mix with OpenSSH 5.3p1.

[arlimus]

As for Debian 6 (6.0.9): OpenSSH 5.5 (1:5.5p1-6+squeeze5)

aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,
aes256-cbc,arcfour

hmac-md5,hmac-sha1,[email protected],
hmac-ripemd160,hmac-sha1-96,hmac-md5-96

No KEX

Same as 5.3

[arlimus]

Debian 7 (7.4): OpenSSH 6.0 (1:6.0p1-4+deb7u1). Same as 5.9 in terms ciphers, macs, and kex.