One interesting fact about padding oracle attacks (the family of attacks to which poodle belongs) is that they only work on CBC-mode block ciphers. CTR-mode, an alternative mode of operation that essentially changes a block cipher to a stream cipher, cannot be vulnerable to this kind of attack (and has the added benefit of being easily parallelizable), but has suffered from a lack of adaption due to some misunderstandings. As @journeysquid noted, OpenSSH has now actually disabled CBC ciphers in general, which is probably a good idea.
Note: You probably shouldn’t actually use CTR mode for anything, is it doesn’t provide authentication, but in a situation where you’re choosing between CTR and CBC, choose CTR
One interesting fact about padding oracle attacks (the family of attacks to which poodle belongs) is that they only work on CBC-mode block ciphers. CTR-mode, an alternative mode of operation that essentially changes a block cipher to a stream cipher, cannot be vulnerable to this kind of attack (and has the added benefit of being easily parallelizable), but has suffered from a lack of adaption due to some misunderstandings. As @journeysquid noted, OpenSSH has now actually disabled CBC ciphers in general, which is probably a good idea.
Note: You probably shouldn’t actually use CTR mode for anything, is it doesn’t provide authentication, but in a situation where you’re choosing between CTR and CBC, choose CTR
score 2 · canonical