CVS log for src/usr.bin/ssh/kex-names.c

Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.6 / (download) - annotate - [select for diffs], Tue Sep 2 11:08:34 2025 UTC (11 days ago) by djm
Branch: MAIN
CVS Tags: HEAD
Changes since 1.5: +6 -15 lines
Diff to previous 1.5 (colored)

simplify algorithm list functions using xextendf(); ok dtucker@

Revision 1.5 / (download) - annotate - [select for diffs], Mon Aug 11 10:55:38 2025 UTC (4 weeks, 5 days ago) by djm
Branch: MAIN
Changes since 1.4: +30 -17 lines
Diff to previous 1.4 (colored)

ssh(1): add a warning when the connection negotiates a non-post
quantum safe key agreement algorithm.

Controlled via a new WarnWeakCrypto ssh_config option, defaulting
to on. This option might grow additional weak crypto warnings in
the future.

More details at https://openssh.com/pq.html

mostly by deraadt@ feedback dtucker@ ok deraadt@

Revision 1.4 / (download) - annotate - [select for diffs], Mon Sep 9 02:39:57 2024 UTC (12 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_7_7_BASE, OPENBSD_7_7, OPENBSD_7_6_BASE, OPENBSD_7_6
Changes since 1.3: +1 -3 lines
Diff to previous 1.3 (colored)

pull post-quantum ML-KEM/x25519 key exchange out from compile-time
flag now than an IANA codepoint has been assigned for the algorithm.

Add mlkem768x25519-sha256 in 2nd KexAlgorithms preference slot.

ok markus@

Revision 1.3 / (download) - annotate - [select for diffs], Mon Sep 2 12:13:56 2024 UTC (12 months, 1 week ago) by djm
Branch: MAIN
Changes since 1.2: +5 -1 lines
Diff to previous 1.2 (colored)

Add experimental support for hybrid post-quantum key exchange
ML-KEM768 with ECDH/X25519 from the Internet-draft:
https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-03

This is based on previous patches from markus@ but adapted to use the
final FIPS203 standard ML-KEM using a formally-verified implementation
from libcrux.

Note this key exchange method is still a draft and thus subject to
change. It is therefore disabled by default; set MLKEM=yes to build it.
We're making it available now to make it easy for other SSH
implementations to test against it.

ok markus@ deraadt@

Revision 1.2 / (download) - annotate - [select for diffs], Thu Aug 22 23:11:30 2024 UTC (12 months, 3 weeks ago) by djm
Branch: MAIN
Changes since 1.1: +3 -1 lines
Diff to previous 1.1 (colored)

sntrup761x25519-sha512 now has an IANA codepoint assigned,
so we can make the algorithm available without the @openssh.com
suffix too. ok markus@ deraadt@

Revision 1.1 / (download) - annotate - [select for diffs], Fri May 17 00:32:32 2024 UTC (15 months, 4 weeks ago) by djm
Branch: MAIN

missing files from previous

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.