CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2025/08/11 04:55:38
Modified files:
usr.bin/ssh : sshconnect.c ssh_config.5 readconf.h readconf.c
kex.h kex.c kex-names.c
Log message:
ssh(1): add a warning when the connection negotiates a non-post
quantum safe key agreement algorithm.
Controlled via a new WarnWeakCrypto ssh_config option, defaulting
to on. This option might grow additional weak crypto warnings in
the future.
More details at https://openssh.com/pq.html
mostly by deraadt@ feedback dtucker@ ok deraadt@
