[openssh-commits] [openssh] branch V_9_6 updated: support sntrup761x25519-sha512 alias

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch V_9_6
in repository openssh.

The following commit(s) were added to refs/heads/V_9_6 by this push:
     new 4306a0ccb support sntrup761x25519-sha512 alias
4306a0ccb is described below

commit 4306a0ccb712249c98c0ab1a8ad4bf0761be4011
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Mon Aug 11 16:24:54 2025 +1000

    support sntrup761x25519-sha512 alias
    
    OpenSSH 9.6 supports the sntrup761x25519-sha512 at openssh.com
    key agreement algorithm. As part of standardisation, this algorithm
    has been assigned the name sntrup761x25519-sha512.
    
    This commit enables the existing algorithm under this new name.
---
 kex.c        | 2 ++
 kex.h        | 1 +
 myproposal.h | 1 +
 3 files changed, 4 insertions(+)

diff --git a/kex.c b/kex.c
index cbb2af596..df1756b1a 100644
--- a/kex.c
+++ b/kex.c
@@ -113,6 +113,8 @@ static const struct kexalg kexalgs[] = {
 	{ KEX_CURVE25519_SHA256, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
 	{ KEX_CURVE25519_SHA256_OLD, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
 #ifdef USE_SNTRUP761X25519
+	{ KEX_SNTRUP761X25519_SHA512_IANA, KEX_KEM_SNTRUP761X25519_SHA512, 0,
+	    SSH_DIGEST_SHA512 },
 	{ KEX_SNTRUP761X25519_SHA512, KEX_KEM_SNTRUP761X25519_SHA512, 0,
 	    SSH_DIGEST_SHA512 },
 #endif
diff --git a/kex.h b/kex.h
index ba3a6a4ea..054a9d8e0 100644
--- a/kex.h
+++ b/kex.h
@@ -63,6 +63,7 @@
 #define	KEX_CURVE25519_SHA256		"curve25519-sha256"
 #define	KEX_CURVE25519_SHA256_OLD	"curve25519-sha256 at libssh.org"
 #define	KEX_SNTRUP761X25519_SHA512	"sntrup761x25519-sha512 at openssh.com"
+#define	KEX_SNTRUP761X25519_SHA512_IANA	"sntrup761x25519-sha512"
 
 #define COMP_NONE	0
 /* pre-auth compression (COMP_ZLIB) is only supported in the client */
diff --git a/myproposal.h b/myproposal.h
index ee6e9f741..0528cd783 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -25,6 +25,7 @@
  */
 
 #define KEX_SERVER_KEX	\
+	"sntrup761x25519-sha512," \
 	"sntrup761x25519-sha512 at openssh.com," \
 	"curve25519-sha256," \
 	"curve25519-sha256 at libssh.org," \

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.