backporting sntrup761x25519-sha512 key exchange to OpenSSH 8.9-9.8

Theo de Raadt deraadt at openbsd.org
Tue Aug 12 14:40:26 AEST 2025


Damien Miller <djm at mindrot.org> wrote:

> Hi,
> 
> I have just made a series of commits to the stable branches of portable
> OpenSSH versions 8.9 through 9.8 to enable the "sntrup761x25519-sha512"
> key agreement algorithm.
> 
> This algorithm is the IANA-allocated name for the existing post-quantum
> algorithm "sntrup761x25519-sha512 at openssh.com". Apart from the name,
> "sntrup761x25519-sha512" is completely identical and it was only a
> trivial change to enable the new standard name as an additional
> alias.

It's been pointed out there are some lazy people :-)

So this is the tiny change to pickup:

https://github.com/openssh/openssh-portable/commit/ffdbae4c0201d42bfa1f5c5e9c21454d10795491

That probably patches into most of the versions above 8.9 or you can find
the exact patch you need.


More information about the openssh-unix-dev mailing list