Aes-*-cfb support #835
-
|
Hi! Digging in older versione I've seen that shadowsocks-rust used to support aes-*-cfb ciphers as well, then it's been removed after v1.8.23.. in my understanding I imagine that is to get rid of the openssl dependency. |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 2 replies
-
|
@thepyper. If you read the README.md file carefully, you would know that "deprecated stream ciphers. WARN: stream ciphers are UNSAFE!". They are disabled by default because stream-cipher has been proven vulnerable to Redirect attack. Nonetheless, you can enable them via "cargo build --features stream-cipher". |
Beta Was this translation helpful? Give feedback.
-
|
Thanks, I'll try to build this way! |
Beta Was this translation helpful? Give feedback.
-
|
Stream ciphers have already proved to have fatal security issue, so use it at your own risk. IF YOUR SERVERS GOT BLOCKED, JUST DO NOT COMPLAIN ABOUT THAT SHADOWSOCKS' PROTOCOL IS PRONE TO BE DETECTED BECAUSE OF USING THE DEPRECATED STREAM PROTOCOLS. |
Beta Was this translation helpful? Give feedback.
-
|
I'll use new ciphers where possible, but I'll try to keep compatibility with what's already out there... and won't complain :) |
Beta Was this translation helpful? Give feedback.
@thepyper. If you read the README.md file carefully, you would know that "deprecated stream ciphers. WARN: stream ciphers are UNSAFE!". They are disabled by default because stream-cipher has been proven vulnerable to Redirect attack.
Nonetheless, you can enable them via "cargo build --features stream-cipher".