diff options
| author | Florian Wininger <fw.centrale@gmail.com> | 2023-05-14 21:46:55 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-14 21:46:55 +0200 |
| commit | 47deccf6ce14fceca677483c1ae4cb1227dcd562 (patch) | |
| tree | 623cbf25feb8123ccf6efa747521550472b1bfee | |
| parent | 00c38ab3569dea3177a203af60c1006e18f6915f (diff) | |
| download | net-ssh-47deccf6ce14fceca677483c1ae4cb1227dcd562.tar.gz | |
Update the EOS for weak algorithms
| -rw-r--r-- | README.md | 36 |
1 files changed, 18 insertions, 18 deletions
@@ -33,7 +33,7 @@ We strongly recommend that you install a servers's version that supports the lat It is possible to return to the previous behavior by adding the option : `append_all_supported_algorithms: true` -Unsecure algoritms will definitely be removed in Net::SSH 7.*. +Unsecure algoritms will definitely be removed in Net::SSH 8.*. ### Host Keys @@ -44,7 +44,7 @@ Unsecure algoritms will definitely be removed in Net::SSH 7.*. | ecdsa-sha2-nistp521 | OK | [using weak elliptic curves](https://safecurves.cr.yp.to/) | | ecdsa-sha2-nistp384 | OK | [using weak elliptic curves](https://safecurves.cr.yp.to/) | | ecdsa-sha2-nistp256 | OK | [using weak elliptic curves](https://safecurves.cr.yp.to/) | -| ssh-dss | Deprecated in 6.0 | unsecure, will be removed in 7.0 | +| ssh-dss | Deprecated in 6.0 | unsecure, will be removed in 8.0 | ### Key Exchange @@ -54,9 +54,9 @@ Unsecure algoritms will definitely be removed in Net::SSH 7.*. | ecdh-sha2-nistp521 | OK | [using weak elliptic curves](https://safecurves.cr.yp.to/) | | ecdh-sha2-nistp384 | OK | [using weak elliptic curves](https://safecurves.cr.yp.to/) | | ecdh-sha2-nistp256 | OK | [using weak elliptic curves](https://safecurves.cr.yp.to/) | -| diffie-hellman-group1-sha1 | Deprecated in 6.0 | unsecure, will be removed in 7.0 | +| diffie-hellman-group1-sha1 | Deprecated in 6.0 | unsecure, will be removed in 8.0 | | diffie-hellman-group14-sha1 | OK | | -| diffie-hellman-group-exchange-sha1 | Deprecated in 6.0 | unsecure, will be removed in 7.0 | +| diffie-hellman-group-exchange-sha1 | Deprecated in 6.0 | unsecure, will be removed in 8.0 | | diffie-hellman-group-exchange-sha256 | OK | | ### Encryption algorithms (ciphers) @@ -64,13 +64,13 @@ Unsecure algoritms will definitely be removed in Net::SSH 7.*. | Name | Support | Details | |--------------------------------------|-----------------------|----------| | aes256-ctr / aes192-ctr / aes128-ctr | OK | | -| aes256-cbc / aes192-cbc / aes128-cbc | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| rijndael-cbc@lysator.liu.se | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| blowfish-ctr blowfish-cbc | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| cast128-ctr cast128-cbc | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| 3des-ctr 3des-cbc | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| idea-cbc | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| none | Deprecated in 6.0 | unsecure, will be removed in 7.0 | +| aes256-cbc / aes192-cbc / aes128-cbc | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| rijndael-cbc@lysator.liu.se | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| blowfish-ctr blowfish-cbc | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| cast128-ctr cast128-cbc | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| 3des-ctr 3des-cbc | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| idea-cbc | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| none | Deprecated in 6.0 | unsecure, will be removed in 8.0 | ### Message Authentication Code algorithms @@ -80,14 +80,14 @@ Unsecure algoritms will definitely be removed in Net::SSH 7.*. | hmac-sha2-256-etm | OK | | | hmac-sha2-512 | OK | | | hmac-sha2-256 | OK | | -| hmac-sha2-512-96 | Deprecated in 6.0 | removed from the specification, will be removed in 7.0 | -| hmac-sha2-256-96 | Deprecated in 6.0 | removed from the specification, will be removed in 7.0 | +| hmac-sha2-512-96 | Deprecated in 6.0 | removed from the specification, will be removed in 8.0 | +| hmac-sha2-256-96 | Deprecated in 6.0 | removed from the specification, will be removed in 8.0 | | hmac-sha1 | OK | for backward compatibility | -| hmac-sha1-96 | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| hmac-ripemd160 | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| hmac-md5 | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| hmac-md5-96 | Deprecated in 6.0 | unsecure, will be removed in 7.0 | -| none | Deprecated in 6.0 | unsecure, will be removed in 7.0 | +| hmac-sha1-96 | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| hmac-ripemd160 | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| hmac-md5 | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| hmac-md5-96 | Deprecated in 6.0 | unsecure, will be removed in 8.0 | +| none | Deprecated in 6.0 | unsecure, will be removed in 8.0 | ## SYNOPSIS: |