diff --git a/test/docker/expected_results/dropbear_2019.78_test1.json b/test/docker/expected_results/dropbear_2019.78_test1.json index 124859f..34a4284 100644 --- a/test/docker/expected_results/dropbear_2019.78_test1.json +++ b/test/docker/expected_results/dropbear_2019.78_test1.json @@ -207,10 +207,8 @@ "algorithm": "kexguess2@matt.ucc.asn.au", "notes": { "info": [ + "pseudo-algorithm used by Dropbear to enable kex guessing", "available since Dropbear SSH 2013.57" - ], - "warn": [ - "does not provide protection against post-quantum attacks" ] } } @@ -396,10 +394,6 @@ { "name": "diffie-hellman-group14-sha256", "notes": "" - }, - { - "name": "kexguess2@matt.ucc.asn.au", - "notes": "" } ], "mac": [ diff --git a/test/docker/expected_results/dropbear_2019.78_test1.txt b/test/docker/expected_results/dropbear_2019.78_test1.txt index 988496d..d517456 100644 --- a/test/docker/expected_results/dropbear_2019.78_test1.txt +++ b/test/docker/expected_results/dropbear_2019.78_test1.txt @@ -27,8 +27,8 @@  `- [warn] 2048-bit modulus only provides 112-bits of symmetric strength  `- [warn] does not provide protection against post-quantum attacks `- [info] available since OpenSSH 3.9, Dropbear SSH 0.53 -(kex) kexguess2@matt.ucc.asn.au -- [warn] does not provide protection against post-quantum attacks - `- [info] available since Dropbear SSH 2013.57 +(kex) kexguess2@matt.ucc.asn.au -- [info] available since Dropbear SSH 2013.57 + `- [info] pseudo-algorithm used by Dropbear to enable kex guessing # host-key algorithms (key) ecdsa-sha2-nistp256 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency @@ -90,7 +90,6 @@ (rec) -curve25519-sha256@libssh.org -- kex algorithm to remove  (rec) -diffie-hellman-group14-sha256 -- kex algorithm to remove  (rec) -hmac-sha2-256 -- mac algorithm to remove  -(rec) -kexguess2@matt.ucc.asn.au -- kex algorithm to remove  # additional info (nfo) For hardening guides on common OSes, a built-in list can be viewed with --list-hardening-guides, or an online list can be found at: