Skip to content

Commit 16d6a71

Browse files
committed
support sntrup761x25519-sha512 alias
OpenSSH 9.1 supports the sntrup761x25519-sha512@openssh.com key agreement algorithm. As part of standardisation, this algorithm has been assigned the name sntrup761x25519-sha512. This commit enables the existing algorithm under this new name.
1 parent 25da425 commit 16d6a71

File tree

3 files changed

+4
-0
lines changed

3 files changed

+4
-0
lines changed

kex.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -111,6 +111,8 @@ static const struct kexalg kexalgs[] = {
111111
{ KEX_CURVE25519_SHA256, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
112112
{ KEX_CURVE25519_SHA256_OLD, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
113113
#ifdef USE_SNTRUP761X25519
114+
{ KEX_SNTRUP761X25519_SHA512_IANA, KEX_KEM_SNTRUP761X25519_SHA512, 0,
115+
SSH_DIGEST_SHA512 },
114116
{ KEX_SNTRUP761X25519_SHA512, KEX_KEM_SNTRUP761X25519_SHA512, 0,
115117
SSH_DIGEST_SHA512 },
116118
#endif

kex.h

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,7 @@
6363
#define KEX_CURVE25519_SHA256 "curve25519-sha256"
6464
#define KEX_CURVE25519_SHA256_OLD "curve25519-sha256@libssh.org"
6565
#define KEX_SNTRUP761X25519_SHA512 "sntrup761x25519-sha512@openssh.com"
66+
#define KEX_SNTRUP761X25519_SHA512_IANA "sntrup761x25519-sha512"
6667

6768
#define COMP_NONE 0
6869
/* pre-auth compression (COMP_ZLIB) is only supported in the client */

myproposal.h

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@
2525
*/
2626

2727
#define KEX_SERVER_KEX \
28+
"sntrup761x25519-sha512," \
2829
"sntrup761x25519-sha512@openssh.com," \
2930
"curve25519-sha256," \
3031
"curve25519-sha256@libssh.org," \

0 commit comments

Comments
 (0)