Git/ssh-audit
1
0 Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2026-10-27 03:21:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added 1 new host key: ssh-mldsa44-ed25519. #378

Browse Source
This commit is contained in:
Joe Testa committed 2026-10-17 16:10:46 -04:00
1 parent 8437e62abb
commit 1df77bfbb6
2 files changed
+4 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+1
View File
@@ -258,6 +258,7 @@ For convenience, a web front-end on top of the command-line tool is available at
- Fixed a perhaps rare crash when performing connection rate tests during standard audits. - Fixed a perhaps rare crash when performing connection rate tests during standard audits.
- No longer mark `kexguess2@matt.ucc.asn.au` (pseudo-kex used by Dropbear) as not PQ-safe. - No longer mark `kexguess2@matt.ucc.asn.au` (pseudo-kex used by Dropbear) as not PQ-safe.
- Added `-V`/`--version` flag to print version and terminate; credit [Christian Krause](https://github.com/wookietreiber). - Added `-V`/`--version` flag to print version and terminate; credit [Christian Krause](https://github.com/wookietreiber).
- Added 1 new host key: `ssh-mldsa44-ed25519`.
### v3.9.0 (2026-07-04) ### v3.9.0 (2026-07-04)
- BIG THANKS to [realmiwi](https://github.com/realmiwi) for being the project's *very first sponsor!!* - BIG THANKS to [realmiwi](https://github.com/realmiwi) for being the project's *very first sponsor!!*
src/ssh_audit/ssh2_kexdb.py
+3 -1
View File
@@ -77,6 +77,7 @@ class SSH2_KexDB: # pylint: disable=too-few-public-methods
INFO_REMOVED_IN_OPENSSH61 = 'removed since OpenSSH 6.1, removed from specification' INFO_REMOVED_IN_OPENSSH61 = 'removed since OpenSSH 6.1, removed from specification'
INFO_REMOVED_IN_OPENSSH69 = 'removed in OpenSSH 6.9: https://www.openssh.com/txt/release-6.9' INFO_REMOVED_IN_OPENSSH69 = 'removed in OpenSSH 6.9: https://www.openssh.com/txt/release-6.9'
INFO_REMOVED_IN_OPENSSH70 = 'removed in OpenSSH 7.0: https://www.openssh.com/txt/release-7.0' INFO_REMOVED_IN_OPENSSH70 = 'removed in OpenSSH 7.0: https://www.openssh.com/txt/release-7.0'
INFO_REMOVED_IN_OPENSSH106 = 'removed in OpenSSH 10.6: https://www.openssh.org/txt/release-10.6'
INFO_WITHDRAWN_PQ_ALG = 'the sntrup4591761 algorithm was withdrawn, as it may not provide strong post-quantum security' INFO_WITHDRAWN_PQ_ALG = 'the sntrup4591761 algorithm was withdrawn, as it may not provide strong post-quantum security'
INFO_EXTENSION_NEGOTIATION = 'pseudo-algorithm that denotes the peer supports RFC8308 extensions' INFO_EXTENSION_NEGOTIATION = 'pseudo-algorithm that denotes the peer supports RFC8308 extensions'
INFO_STRICT_KEX = 'pseudo-algorithm that denotes the peer supports a stricter key exchange method as a counter-measure to the Terrapin attack (CVE-2023-48795)' INFO_STRICT_KEX = 'pseudo-algorithm that denotes the peer supports a stricter key exchange method as a counter-measure to the Terrapin attack (CVE-2023-48795)'
@@ -272,7 +273,8 @@ class SSH2_KexDB: # pylint: disable=too-few-public-methods
'ssh-mldsa-65': [[], [], [], [INFO_NIST_PQC_LEVEL_3]], 'ssh-mldsa-65': [[], [], [], [INFO_NIST_PQC_LEVEL_3]],
'ssh-mldsa-87': [[], [], [], [INFO_NIST_PQC_LEVEL_5]], 'ssh-mldsa-87': [[], [], [], [INFO_NIST_PQC_LEVEL_5]],
'ssh-mldsa44': [[], [], [], [INFO_NIST_PQC_LEVEL_2]], 'ssh-mldsa44': [[], [], [], [INFO_NIST_PQC_LEVEL_2]],
'ssh-mldsa44-ed25519@openssh.com': [['10.4'], [], [], [INFO_NIST_PQC_LEVEL_2]], 'ssh-mldsa44-ed25519@openssh.com': [['10.4', '10.6'], [], [], [INFO_NIST_PQC_LEVEL_2, INFO_REMOVED_IN_OPENSSH106]],
'ssh-mldsa44-ed25519': [['10.6'], [], [], [INFO_NIST_PQC_LEVEL_2]],
'ssh-mldsa65': [[], [], [], [INFO_NIST_PQC_LEVEL_3]], 'ssh-mldsa65': [[], [], [], [INFO_NIST_PQC_LEVEL_3]],
'ssh-mldsa87': [[], [], [], [INFO_NIST_PQC_LEVEL_5]], 'ssh-mldsa87': [[], [], [], [INFO_NIST_PQC_LEVEL_5]],
'ssh-rsa1': [[], [FAIL_SHA1]], 'ssh-rsa1': [[], [FAIL_SHA1]],