[openssh-commits] [openssh] branch V_8_9 updated: support sntrup761x25519-sha512 alias

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch V_8_9
in repository openssh.

The following commit(s) were added to refs/heads/V_8_9 by this push:
     new ffdbae4c0 support sntrup761x25519-sha512 alias
ffdbae4c0 is described below

commit ffdbae4c0201d42bfa1f5c5e9c21454d10795491
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Mon Aug 11 15:36:27 2025 +1000

    support sntrup761x25519-sha512 alias
    
    OpenSSH 8.9 supports the sntrup761x25519-sha512 at openssh.com
    key agreement algorithm. As part of standardisation, this algorithm
    has been assigned the name sntrup761x25519-sha512.
    
    This commit enables the existing algorithm under this new name.
---
 kex.c        | 2 ++
 kex.h        | 1 +
 myproposal.h | 1 +
 3 files changed, 4 insertions(+)

diff --git a/kex.c b/kex.c
index 0bcd27dc5..8d68ad567 100644
--- a/kex.c
+++ b/kex.c
@@ -111,6 +111,8 @@ static const struct kexalg kexalgs[] = {
 	{ KEX_CURVE25519_SHA256, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
 	{ KEX_CURVE25519_SHA256_OLD, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
 #ifdef USE_SNTRUP761X25519
+	{ KEX_SNTRUP761X25519_SHA512_IANA, KEX_KEM_SNTRUP761X25519_SHA512, 0,
+	    SSH_DIGEST_SHA512 },
 	{ KEX_SNTRUP761X25519_SHA512, KEX_KEM_SNTRUP761X25519_SHA512, 0,
 	    SSH_DIGEST_SHA512 },
 #endif
diff --git a/kex.h b/kex.h
index c35329501..5282f2825 100644
--- a/kex.h
+++ b/kex.h
@@ -63,6 +63,7 @@
 #define	KEX_CURVE25519_SHA256		"curve25519-sha256"
 #define	KEX_CURVE25519_SHA256_OLD	"curve25519-sha256 at libssh.org"
 #define	KEX_SNTRUP761X25519_SHA512	"sntrup761x25519-sha512 at openssh.com"
+#define	KEX_SNTRUP761X25519_SHA512_IANA	"sntrup761x25519-sha512"
 
 #define COMP_NONE	0
 /* pre-auth compression (COMP_ZLIB) is only supported in the client */
diff --git a/myproposal.h b/myproposal.h
index ee50d215b..edb0ffe83 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -30,6 +30,7 @@
 	"ecdh-sha2-nistp256," \
 	"ecdh-sha2-nistp384," \
 	"ecdh-sha2-nistp521," \
+	"sntrup761x25519-sha512," \
 	"sntrup761x25519-sha512 at openssh.com," \
 	"diffie-hellman-group-exchange-sha256," \
 	"diffie-hellman-group16-sha512," \

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.