Host names hashing
Dmitry Belyavskiy
dbelyavs at redhat.com
Wed Jan 5 22:59:00 AEDT 2022
Dear colleagues,
OpenSSH uses SHA1 without any alternate options for hostname hashing (looks
like this is the last place where an alternate option for SHA1 is not
available). SHA1 HMAC is considered safe enough for now, but it may change
so it's definitely worth migrating to more safe algorithms (SHA2?).
I'd like to discuss possible options of such migration.
Many thanks!
--
Dmitry Belyavskiy
More information about the openssh-unix-dev
mailing list