[tor-talk] Mosh safe with tor?

[Nick Mathewson]

On Fri, Jan 18, 2013 at 10:08 AM, Andrew Lewman <andrew at torproject.is> wrote:
> On Fri, 18 Jan 2013 13:40:14 +0100
> Jerzy Łogiewa <jerzyma at interia.eu> wrote:
>
>> Hello!
>>
>> Does anyone know, is the Mosh shell safe for tor use? Any known
>> leaking?
>
> It's UDP-based, so no. And it appears to be based upon one person's
> mods to AES.

FWIW, mosh has a decent security reputation, though I don't know how
secure they are personally.  According to their paper, they're using
AES128 in OCB mode, which is basically kosher.  (If they *are* using a
modified AES, that's pretty scary.)

But yeah, in any case: if mosh is UDP-only, then it won't run over Tor.

yrs,
-- 
Nick