SSH-2


Specified in IETF secsh working group I-Ds



Lengths, data, and padding encrypted

Total length (data+padding) must be a multiple of the cipher blocksize

As implemented, only padded to next blocksize boundary