post-quantum

Brian Candler b.candler at pobox.com
Sat Nov 7 19:44:17 AEDT 2026


On 07/11/2026 07:23, Klaus Ethgen wrote:
> Since update, my logs get floated with the following message:
> ... is not using a post-quantum key exchange algorithm: ...
>
> I know that. There is noreason to fload my logs with that. So, how can I
> get rid of that message? I did not find a setting in the config.

See WarnWeakCrypto in both ssh_config(5) and sshd_config(5) man pages.

      WarnWeakCrypto
              controls whether the user is warned when the cryptographic 
algorithms negotiated for the connection are weak or otherwise recommended
              against.  Warnings may be disabled by turning off a 
specific warning or by disabling all warnings.  Warnings about 
connections that
              don't use a post-quantum key exchange may be disabled 
using the no-pq-kex flag.  no will disable all warnings.  The default,
              equivalent to yes, is to enable all warnings.




More information about the openssh-unix-dev mailing list