Added note that sntrup761x25519-sha512@openssh.com is the default OpenSSH kex since version 9.0.

This commit is contained in:
Joe Testa
2024-03-15 17:24:21 -04:00
parent b2f46eb71a
commit 7b3402b207
11 changed files with 25 additions and 24 deletions

View File

@ -12,9 +12,9 @@
# key exchange algorithms
(kex) curve25519-sha256 -- [info] available since OpenSSH 7.4, Dropbear SSH 2018.76
 `- [info] default key exchange since OpenSSH 6.4
 `- [info] default key exchange from OpenSSH 6.4 to 8.9
(kex) curve25519-sha256@libssh.org -- [info] available since OpenSSH 6.4, Dropbear SSH 2013.62
 `- [info] default key exchange since OpenSSH 6.4
 `- [info] default key exchange from OpenSSH 6.4 to 8.9
(kex) ecdh-sha2-nistp256 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency
`- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
(kex) ecdh-sha2-nistp384 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency