-
Notifications
You must be signed in to change notification settings - Fork 599
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add key exchange algorithm diffie-hellman-group-exchange-sha256 #167
Comments
Refer also to Specifications implemented by OpenSSH. |
Any progress on this? It is becoming an issue due to many SSH servers deprecating support for the SHA-1 algorithm, so we cannot connect to them. How much work would be involved adding this support? |
No progress on this yet. From what I read the flow for this exhange 2015-05-09 0:24 GMT+02:00 Andrew Donald Kennedy notifications@github.com:
|
This issue blocks secure sshd configuration on every server that needs to be accessible via sshj. It's 2015 now and SHA-1 shouldn't be used for crypto, anymore - it's too easy to generate collisions on it. And RFC4419 where diffie-hellman-group-exchange-sha256 was defined is 9 years old already... PS You might want to check the Secure Secure Shell article for some other sshd settings worth checking. |
+1 |
👏 |
Currently only
diffie-hellman-group14-sha1
anddiffie-hellman-group1-sha1
is implemented.The text was updated successfully, but these errors were encountered: