ssh-audit icon indicating copy to clipboard operation
ssh-audit copied to clipboard

Recognize curve25519-sha256 in addition to [email protected]

Open jauderho opened this issue 7 years ago • 2 comments

Using the git version of ssh-audit, curve25519-sha256 is currently flagged as an unknown algorithm whereas [email protected] is correctly identified.

Looking at the sshd_config man page for OpenSSH 7.6p1, both are valid for KexAlgorithms. The default sequence is listed as

curve25519-sha256,[email protected], ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group14-sha1

Some software such as SecureCRT 8.5.2 require the usage of curve25519-sha256 instead of [email protected]

jauderho avatar Nov 23 '18 23:11 jauderho

I'll also vote for that

vgrebenschikov avatar Jun 14 '19 13:06 vgrebenschikov

@jauderho @vgrebenschikov

I forked this project and continued development. This feature is implemented in v2.0.0: https://github.com/jtesta/ssh-audit/releases/tag/v2.0.0

jtesta avatar Aug 29 '19 20:08 jtesta