From 859cb7012e5b4b77d21897b134d530547972e6f3 Mon Sep 17 00:00:00 2001 From: Joe Testa Date: Fri, 3 Jul 2026 10:59:16 -0400 Subject: [PATCH] Added ssh-mldsa44-ed25519@openssh.com host key type. --- README.md | 2 +- src/ssh_audit/ssh2_kexdb.py | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 42f78b1..0117b9c 100644 --- a/README.md +++ b/README.md @@ -272,7 +272,7 @@ For convenience, a web front-end on top of the command-line tool is available at - Added hardening guides and policies for Rocky Linux 10. - Added hardening guides and policies for Ubuntu 26.04. - Added 2 new key exchanges: `mlkem768nistp256-sha256`, `mlkem1024nistp384-sha384`. - - Added 10 new host keys: `webauthn-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com`, `mldsa-44`, `mldsa-65`, `mldsa-87`, `ssh-mldsa-44`, `ssh-mldsa-65`, `ssh-mldsa-87`, `ssh-mldsa44`, `ssh-mldsa65`, `ssh-mldsa87`. + - Added 11 new host keys: `webauthn-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com`, `mldsa-44`, `ssh-mldsa44-ed25519@openssh.com`, `mldsa-65`, `mldsa-87`, `ssh-mldsa-44`, `ssh-mldsa-65`, `ssh-mldsa-87`, `ssh-mldsa44`, `ssh-mldsa65`, `ssh-mldsa87`. - Added 2 new ciphers: `AEAD_CAMELLIA_128_GCM`, `AEAD_CAMELLIA_256_GCM`. ### v3.3.0 (2024-10-15) diff --git a/src/ssh_audit/ssh2_kexdb.py b/src/ssh_audit/ssh2_kexdb.py index 9a3b277..65688df 100644 --- a/src/ssh_audit/ssh2_kexdb.py +++ b/src/ssh_audit/ssh2_kexdb.py @@ -271,6 +271,7 @@ class SSH2_KexDB: # pylint: disable=too-few-public-methods 'ssh-mldsa-65': [[], [], [], [INFO_NIST_PQC_LEVEL_3]], 'ssh-mldsa-87': [[], [], [], [INFO_NIST_PQC_LEVEL_5]], 'ssh-mldsa44': [[], [], [], [INFO_NIST_PQC_LEVEL_2]], + 'ssh-mldsa44-ed25519@openssh.com': [['10.4'], [], [], [INFO_NIST_PQC_LEVEL_2]], 'ssh-mldsa65': [[], [], [], [INFO_NIST_PQC_LEVEL_3]], 'ssh-mldsa87': [[], [], [], [INFO_NIST_PQC_LEVEL_5]], 'ssh-rsa1': [[], [FAIL_SHA1]],