OpenSSH 10.4/10.4p1 Released

Discussion (6 Comments)Read Original on HackerNews

Panino•about 3 hours ago

Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

When pq key agreement was added in 2019, it took almost 3 years for it to become enabled by default. This isn't criticism, just an observation. I don't have a pressing need for pq sigs. Always happy for new OpenSSH releases though!

throw0101a•25 minutes ago

> Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

The draft was only published a few months ago:

* https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e...

The draft is a 'personal document', so not associated with the IETF/WG.

throw0101a•about 3 hours ago

HTML version of release notes:

* https://www.openssh.org/releasenotes.html#10.4

atonse•28 minutes ago

Still looks like ascii, doesn’t automatically wrap, nor is it responsive.

Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

lousken•about 2 hours ago

Is hmac-sha1 and umac-64 still enabled by default?

throw0101a•15 minutes ago

Yes:

* https://man.openbsd.org/ssh_config.5#MACs

* https://man.openbsd.org/sshd_config.5#MACs

ETM, encrypt-than-mac, variants are at the front of the preference list.

* https://en.wikipedia.org/wiki/UMAC_(cryptography)

OpenSSH 10.4/10.4p1 Released

⚡ Community Insights

Discussion (6 Comments)Read Original on HackerNews