[mosh-devel] Mosh now portable to iOS, uses OpenSSL AES

[Keith Winstein]

Hello all,

Just pushed some changes to Mosh to address two persistent sources of
frustration.

(1) The Mosh authors have waived the GPL-iTunes incompatibility. Mosh
is now portable to iOS without a conflict with the iTunes Usage Rules.
(Not that we _have_ a port yet...)

(2) Mosh now uses the AES routines from OpenSSL, instead of shipping
its own AES reference implementation. There has been some criticism
that the reference implementation is more susceptible to
timing-related information leakage.

We're very grateful to the Software Freedom Law Center for helping us
draft the appropriate language, and to Phil Rogaway for approving
these waivers for the continued use of AES-OCB. Thank you!

I'd appreciate if you could pound on this version
(https://github.com/keithw/mosh) and let us know of any problems. I'm
particularly concerned about any speed or security regressions, or
platforms where OpenSSL is not available.

Thanks all,
Keith