CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/07/29 21:37:39
Modified files:
usr.bin/ssh : auth2-hostbased.c auth2-pubkey.c
Log message:
Move check of public key type against allowed algorithms to before
parsing of the key sent by the peer.
This removes at least some key parsing and verification paths from
the pre-auth attack surface.
Suggested by Christopher Paul Rohlf of Anthropic, ok deraadt@
