Git/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2024-11-22 18:41:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added 1 new MAC: chacha20-poly1305@openssh.com.

Browse Source
This commit is contained in:
Joe Testa 2020-03-20 00:34:04 -04:00
parent 1ac4041c09
commit 2c4fb971cd
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -72,6 +72,7 @@ $ snap install ssh-audit
### v2.2.1-dev (???) ### v2.2.1-dev (???)
- Added 1 new host key types: `ssh-rsa1`. - Added 1 new host key types: `ssh-rsa1`.
- Added 1 new ciphers: `blowfish`. - Added 1 new ciphers: `blowfish`.
- Added 1 new MACs: `chacha20-poly1305@openssh.com`
### v2.2.0 (2020-03-11) ### v2.2.0 (2020-03-11)
- Marked host key type `ssh-rsa` as weak due to [practical SHA-1 collisions](https://eprint.iacr.org/2020/014.pdf). - Marked host key type `ssh-rsa` as weak due to [practical SHA-1 collisions](https://eprint.iacr.org/2020/014.pdf).

1
ssh-audit.py
View File

@ -518,6 +518,7 @@ class SSH2(object): # pylint: disable=too-few-public-methods
'umac-128-etm@openssh.com': [['6.2']], 'umac-128-etm@openssh.com': [['6.2']],
'aes128-gcm': [[]], 'aes128-gcm': [[]],
'aes256-gcm': [[]], 'aes256-gcm': [[]],
'chacha20-poly1305@openssh.com': [[]], # Despite the @openssh.com tag, this was never shipped as a MAC in OpenSSH (only as a cipher); it is only implemented as a MAC in Syncplify.
} }
} # type: Dict[str, Dict[str, List[List[Optional[str]]]]] } # type: Dict[str, Dict[str, List[List[Optional[str]]]]]