With regard to the changelog, saying CBC ciphers are unsafe is pretty misleading. CBC implemented properly is rock-solid (against a certain subset of attacks with for a certain definition of rock-solid that does include an epsilon term for attacker advantage). It’s just slower and easy to mess up in certain ways (although CTR and CTR-based modes in general are far from foolproof, for instance, reusing a nonce compromising the whole plaintext, instead of just metadata)
I noticed OpenSSH 6.7 has also disabled CBC ciphers (http://www.openbsd.org/56.html), is that just coincidence?
score 1 · canonical
CBC is a poor fit for wire protocols like this; it was part of the problem for many previous issues and seems likely to recur.
score 2 · canonical
With regard to the changelog, saying CBC ciphers are unsafe is pretty misleading. CBC implemented properly is rock-solid (against a certain subset of attacks with for a certain definition of rock-solid that does include an epsilon term for attacker advantage). It’s just slower and easy to mess up in certain ways (although CTR and CTR-based modes in general are far from foolproof, for instance, reusing a nonce compromising the whole plaintext, instead of just metadata)
score 1 · canonical