From 32085b2fa5f78f76af6565d2f62cc2cfdcb62191 Mon Sep 17 00:00:00 2001 From: Joe Testa Date: Sun, 18 May 2025 18:46:40 -0400 Subject: [PATCH] Added two new ciphers: AEAD_CAMELLIA_128_GCM, AEAD_CAMELLIA_256_GCM. --- README.md | 1 + src/ssh_audit/ssh2_kexdb.py | 2 ++ 2 files changed, 3 insertions(+) diff --git a/README.md b/README.md index c4ec713..913873e 100644 --- a/README.md +++ b/README.md @@ -222,6 +222,7 @@ For convenience, a web front-end on top of the command-line tool is available at - When running against multiple hosts, now prints each target host regardless of output level. - Batch mode (`-b`) no longer automatically enables verbose mode, due to sometimes confusing results; users can still explicitly enable verbose mode using the `-v` flag. - Added 2 new key exchanges: `mlkem768nistp256-sha256`, `mlkem1024nistp384-sha384`. + - Added 2 new ciphers: `AEAD_CAMELLIA_128_GCM`, `AEAD_CAMELLIA_256_GCM`. ### v3.3.0 (2024-10-15) - Added Python 3.13 support. diff --git a/src/ssh_audit/ssh2_kexdb.py b/src/ssh_audit/ssh2_kexdb.py index dd65d3d..5118f7b 100644 --- a/src/ssh_audit/ssh2_kexdb.py +++ b/src/ssh_audit/ssh2_kexdb.py @@ -301,6 +301,8 @@ class SSH2_KexDB: # pylint: disable=too-few-public-methods '3des-ofb': [[], [FAIL_3DES], [WARN_CIPHER_MODE]], 'AEAD_AES_128_GCM': [[]], 'AEAD_AES_256_GCM': [[]], + 'AEAD_CAMELLIA_128_GCM': [[]], + 'AEAD_CAMELLIA_256_GCM': [[]], 'aes128-cbc': [['2.3.0,d0.28,l10.2', '6.6', None], [], [WARN_CIPHER_MODE]], 'aes128-ctr': [['3.7,d0.52,l10.4.1']], 'aes128-gcm': [[]],