Skip to content

Commit

Permalink
chg: Debian12, Ubuntu20+: enable sntrup KEX by default
Browse files Browse the repository at this point in the history
speed47 committed Jul 2, 2024
1 parent e3f9fee commit cccbdc0
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion etc/ssh/sshd_config.debian12
Original file line number Diff line number Diff line change
@@ -65,7 +65,7 @@ MACs [email protected],[email protected],hmac-sha2-512-etm@openssh.
# the most secure dh-based kex.
# we avoid algorithms based on the disputed NIST curves, and anything based
# on sha1.
KexAlgorithms curve25519-sha256,[email protected],diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha256
KexAlgorithms [email protected],curve25519-sha256,[email protected],diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha256

# force rekey every 512M of data or 6 hours of connection, whichever comes first
RekeyLimit 512M 6h

0 comments on commit cccbdc0

Please sign in to comment.