Formally Modeling the Terrapin Attack on SSH

Jörg Schwenk, Fabian Bäumer, Marcus Brinkmann

The Terrapin attack against SSH channel integrity (USENIX Security 2024) used a novel attack vector: attacks on the channel state. Surprisingly, not all AEAD modes of SSH were equa…