[openssh-commits] [openssh] branch V_9_7 updated: support sntrup761x25519-sha512 alias

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch V_9_7
in repository openssh.

The following commit(s) were added to refs/heads/V_9_7 by this push:
     new 77f962453 support sntrup761x25519-sha512 alias
77f962453 is described below

commit 77f962453d74559a33f13c76477c2c51e242556b
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Mon Aug 11 16:25:25 2025 +1000

    support sntrup761x25519-sha512 alias
    
    OpenSSH 9.7 supports the sntrup761x25519-sha512 at openssh.com
    key agreement algorithm. As part of standardisation, this algorithm
    has been assigned the name sntrup761x25519-sha512.
    
    This commit enables the existing algorithm under this new name.
---
 kex.c        | 2 ++
 kex.h        | 1 +
 myproposal.h | 1 +
 3 files changed, 4 insertions(+)

diff --git a/kex.c b/kex.c
index 8a0f16513..65259f6a2 100644
--- a/kex.c
+++ b/kex.c
@@ -113,6 +113,8 @@ static const struct kexalg kexalgs[] = {
 	{ KEX_CURVE25519_SHA256, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
 	{ KEX_CURVE25519_SHA256_OLD, KEX_C25519_SHA256, 0, SSH_DIGEST_SHA256 },
 #ifdef USE_SNTRUP761X25519
+	{ KEX_SNTRUP761X25519_SHA512_IANA, KEX_KEM_SNTRUP761X25519_SHA512, 0,
+	    SSH_DIGEST_SHA512 },
 	{ KEX_SNTRUP761X25519_SHA512, KEX_KEM_SNTRUP761X25519_SHA512, 0,
 	    SSH_DIGEST_SHA512 },
 #endif
diff --git a/kex.h b/kex.h
index 0caf42b50..a412bb220 100644
--- a/kex.h
+++ b/kex.h
@@ -63,6 +63,7 @@
 #define	KEX_CURVE25519_SHA256		"curve25519-sha256"
 #define	KEX_CURVE25519_SHA256_OLD	"curve25519-sha256 at libssh.org"
 #define	KEX_SNTRUP761X25519_SHA512	"sntrup761x25519-sha512 at openssh.com"
+#define	KEX_SNTRUP761X25519_SHA512_IANA	"sntrup761x25519-sha512"
 
 #define COMP_NONE	0
 /* pre-auth compression (COMP_ZLIB) is only supported in the client */
diff --git a/myproposal.h b/myproposal.h
index ee6e9f741..0528cd783 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -25,6 +25,7 @@
  */
 
 #define KEX_SERVER_KEX	\
+	"sntrup761x25519-sha512," \
 	"sntrup761x25519-sha512 at openssh.com," \
 	"curve25519-sha256," \
 	"curve25519-sha256 at libssh.org," \

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.