The current "default" supported MAC(s) are not of the "encrypt-then-mac" type (see http://www.freebsd.org/cgi/man.cgi?query=sshd_config&sektion=5 - the MACs section). Is it possible to implement them using their existing counterparts or is there some extra functionality required ?