post-quantum

[Theo de Raadt]

Klaus Ethgen <Klaus+ssh at ethgen.ch> wrote:

> Since update, my logs get floated with the following message:
> ... is not using a post-quantum key exchange algorithm: ...
> 
> I know that. There is noreason to fload my logs with that. So, how can I
> get rid of that message? I did not find a setting in the config.

Poor you.
 
> As I said, I know about that fact. But we live far away from
> post-quantum times and I have not enough trust in the new algorithms
> right now.

You could also run code from 3 years ago.  It does not contain this pesky
crypto code or thousands of other bugs fixes which might not be trustworthy.

After all it is not the crypto algorithm you don't trust... is the
decision makers who put this in, who you don't trust.  I assert that is
the true situation.

This asks the question what "trust" means.  You don't trust us for this
decision.  I urge you to not trust any of our decisions, so you have to go
back at least 3 years, maybe even 10 years, maybe you have to run some
other code entirely untouched by this leadership group!

I can give you assurances that none of the openssh developers were
responsible for the trustworthiness of telnet, so maybe that's a
direction you can go.

Or buy a horse buggy and move back into the woods.