summaryrefslogtreecommitdiffstats
path: root/src/ssh_audit/ssh2_kexdb.py
diff options
context:
space:
mode:
Diffstat (limited to 'src/ssh_audit/ssh2_kexdb.py')
-rw-r--r--src/ssh_audit/ssh2_kexdb.py280
1 files changed, 280 insertions, 0 deletions
diff --git a/src/ssh_audit/ssh2_kexdb.py b/src/ssh_audit/ssh2_kexdb.py
new file mode 100644
index 0000000..643d9c6
--- /dev/null
+++ b/src/ssh_audit/ssh2_kexdb.py
@@ -0,0 +1,280 @@
+"""
+ The MIT License (MIT)
+
+ Copyright (C) 2017-2021 Joe Testa (jtesta@positronsecurity.com)
+ Copyright (C) 2017 Andris Raugulis (moo@arthepsy.eu)
+
+ Permission is hereby granted, free of charge, to any person obtaining a copy
+ of this software and associated documentation files (the "Software"), to deal
+ in the Software without restriction, including without limitation the rights
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+ The above copyright notice and this permission notice shall be included in
+ all copies or substantial portions of the Software.
+
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ THE SOFTWARE.
+"""
+# pylint: disable=unused-import
+from typing import Dict, List, Set, Sequence, Tuple, Iterable # noqa: F401
+from typing import Callable, Optional, Union, Any # noqa: F401
+
+
+class SSH2_KexDB: # pylint: disable=too-few-public-methods
+ WARN_OPENSSH74_UNSAFE = 'disabled (in client) since OpenSSH 7.4, unsafe algorithm'
+ WARN_OPENSSH72_LEGACY = 'disabled (in client) since OpenSSH 7.2, legacy algorithm'
+ FAIL_OPENSSH70_LEGACY = 'removed since OpenSSH 7.0, legacy algorithm'
+ FAIL_OPENSSH70_WEAK = 'removed (in server) and disabled (in client) since OpenSSH 7.0, weak algorithm'
+ FAIL_OPENSSH70_LOGJAM = 'disabled (in client) since OpenSSH 7.0, logjam attack'
+ INFO_OPENSSH69_CHACHA = 'default cipher since OpenSSH 6.9.'
+ FAIL_OPENSSH67_UNSAFE = 'removed (in server) since OpenSSH 6.7, unsafe algorithm'
+ FAIL_OPENSSH61_REMOVE = 'removed since OpenSSH 6.1, removed from specification'
+ FAIL_OPENSSH31_REMOVE = 'removed since OpenSSH 3.1'
+ INFO_OPENSSH82_FUTURE_DEPRECATION = 'a future deprecation notice has been issued in OpenSSH 8.2: https://www.openssh.com/txt/release-8.2'
+ FAIL_DBEAR67_DISABLED = 'disabled since Dropbear SSH 2015.67'
+ FAIL_DBEAR53_DISABLED = 'disabled since Dropbear SSH 0.53'
+ FAIL_DEPRECATED_CIPHER = 'deprecated cipher'
+ FAIL_WEAK_CIPHER = 'using weak cipher'
+ FAIL_WEAK_ALGORITHM = 'using weak/obsolete algorithm'
+ FAIL_PLAINTEXT = 'no encryption/integrity'
+ FAIL_DEPRECATED_MAC = 'deprecated MAC'
+ FAIL_1024BIT_MODULUS = 'using small 1024-bit modulus'
+ FAIL_UNPROVEN = 'using unproven algorithm'
+ FAIL_HASH_WEAK = 'using weak hashing algorithm'
+ WARN_CURVES_WEAK = 'using weak elliptic curves'
+ WARN_RNDSIG_KEY = 'using weak random number generator could reveal the key'
+ WARN_HASH_WEAK = 'using weak hashing algorithm'
+ WARN_CIPHER_MODE = 'using weak cipher mode'
+ WARN_BLOCK_SIZE = 'using small 64-bit block size'
+ WARN_CIPHER_WEAK = 'using weak cipher'
+ WARN_ENCRYPT_AND_MAC = 'using encrypt-and-MAC mode'
+ WARN_TAG_SIZE = 'using small 64-bit tag size'
+ WARN_TAG_SIZE_96 = 'using small 96-bit tag size'
+ WARN_EXPERIMENTAL = 'using experimental algorithm'
+ WARN_OBSOLETE = 'using obsolete algorithm'
+ WARN_UNTRUSTED = 'using untrusted algorithm'
+
+ ALGORITHMS: Dict[str, Dict[str, List[List[Optional[str]]]]] = {
+ # Format: 'algorithm_name': [['version_first_appeared_in'], [reason_for_failure1, reason_for_failure2, ...], [warning1, warning2, ...]]
+ 'kex': {
+ 'diffie-hellman-group1-sha1': [['2.3.0,d0.28,l10.2', '6.6', '6.9'], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH67_UNSAFE, FAIL_OPENSSH70_LOGJAM], [WARN_HASH_WEAK]],
+ 'gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==': [[], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH67_UNSAFE, FAIL_OPENSSH70_LOGJAM], [WARN_HASH_WEAK]],
+ 'gss-gex-sha1-eipGX3TCiQSrx573bT1o1Q==': [[], [], [WARN_HASH_WEAK]],
+ 'gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==': [[], [], [WARN_HASH_WEAK]],
+ 'gss-gex-sha1-': [[], [], [WARN_HASH_WEAK]],
+ 'gss-group1-sha1-eipGX3TCiQSrx573bT1o1Q==': [[], [FAIL_1024BIT_MODULUS], [WARN_HASH_WEAK]],
+ 'gss-group1-sha1-': [[], [FAIL_1024BIT_MODULUS], [WARN_HASH_WEAK]],
+ 'gss-group14-sha1-': [[], [], [WARN_HASH_WEAK]],
+ 'gss-group14-sha1-eipGX3TCiQSrx573bT1o1Q==': [[], [], [WARN_HASH_WEAK]],
+ 'gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==': [[], [], [WARN_HASH_WEAK]],
+ 'gss-group14-sha256-': [[]],
+ 'gss-group14-sha256-toWM5Slw5Ew8Mqkay+al2g==': [[]],
+ 'gss-group15-sha512-': [[]],
+ 'gss-group15-sha512-toWM5Slw5Ew8Mqkay+al2g==': [[]],
+ 'gss-group16-sha512-': [[]],
+ 'gss-nistp256-sha256-': [[], [WARN_CURVES_WEAK]],
+ 'gss-curve25519-sha256-': [[]],
+ 'diffie-hellman-group1-sha256': [[], [FAIL_1024BIT_MODULUS]],
+ 'diffie-hellman-group14-sha1': [['3.9,d0.53,l10.6.0'], [], [WARN_HASH_WEAK]],
+ 'diffie-hellman-group14-sha256': [['7.3,d2016.73']],
+ 'diffie-hellman-group14-sha256@ssh.com': [[]],
+ 'diffie-hellman-group15-sha256': [[]],
+ 'diffie-hellman-group15-sha256@ssh.com': [[]],
+ 'diffie-hellman-group15-sha384@ssh.com': [[]],
+ 'diffie-hellman-group15-sha512': [[]],
+ 'diffie-hellman-group16-sha256': [[]],
+ 'diffie-hellman-group16-sha384@ssh.com': [[]],
+ 'diffie-hellman-group16-sha512': [['7.3,d2016.73']],
+ 'diffie-hellman-group16-sha512@ssh.com': [[]],
+ 'diffie-hellman-group17-sha512': [[]],
+ 'diffie-hellman-group18-sha512': [['7.3']],
+ 'diffie-hellman-group18-sha512@ssh.com': [[]],
+ 'diffie-hellman-group-exchange-sha1': [['2.3.0', '6.6', None], [FAIL_OPENSSH67_UNSAFE], [WARN_HASH_WEAK]],
+ 'diffie-hellman-group-exchange-sha256': [['4.4']],
+ 'diffie-hellman-group-exchange-sha256@ssh.com': [[]],
+ 'diffie-hellman-group-exchange-sha512@ssh.com': [[]],
+ 'ecdh-sha2-curve25519': [[], []],
+ 'ecdh-sha2-nistb233': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistb409': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistk163': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistk233': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistk283': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistk409': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistp192': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistp224': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistp256': [['5.7,d2013.62,l10.6.0'], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistp384': [['5.7,d2013.62'], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistp521': [['5.7,d2013.62'], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-nistt571': [[], [WARN_CURVES_WEAK]],
+ 'ecdh-sha2-1.3.132.0.10': [[]], # ECDH over secp256k1 (i.e.: the Bitcoin curve)
+ 'curve25519-sha256@libssh.org': [['6.5,d2013.62,l10.6.0']],
+ 'curve25519-sha256': [['7.4,d2018.76']],
+ 'curve448-sha512': [[]],
+ 'kexguess2@matt.ucc.asn.au': [['d2013.57']],
+ 'rsa1024-sha1': [[], [FAIL_1024BIT_MODULUS], [WARN_HASH_WEAK]],
+ 'rsa2048-sha256': [[]],
+ 'sntrup4591761x25519-sha512@tinyssh.org': [['8.0', '8.4'], [], [WARN_EXPERIMENTAL]],
+ 'sntrup761x25519-sha512@openssh.com': [['8.5'], [], [WARN_EXPERIMENTAL]],
+ 'kexAlgoCurve25519SHA256': [[]],
+ 'Curve25519SHA256': [[]],
+ 'ext-info-c': [[]], # Extension negotiation (RFC 8308)
+ 'ext-info-s': [[]], # Extension negotiation (RFC 8308)
+ },
+ 'key': {
+ 'ssh-rsa1': [[], [FAIL_WEAK_ALGORITHM]],
+ 'rsa-sha2-256': [['7.2']],
+ 'rsa-sha2-512': [['7.2']],
+ 'ssh-ed25519': [['6.5,l10.7.0']],
+ 'ssh-ed25519-cert-v01@openssh.com': [['6.5']],
+ 'ssh-rsa': [['2.5.0,d0.28,l10.2'], [FAIL_HASH_WEAK], [], [INFO_OPENSSH82_FUTURE_DEPRECATION]],
+ 'ssh-dss': [['2.1.0,d0.28,l10.2', '6.9'], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH70_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-nistp256': [['5.7,d2013.62,l10.6.4'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-nistp384': [['5.7,d2013.62,l10.6.4'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-nistp521': [['5.7,d2013.62,l10.6.4'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-1.3.132.0.10': [[], [], [WARN_RNDSIG_KEY]], # ECDSA over secp256k1 (i.e.: the Bitcoin curve)
+ 'x509v3-sign-dss': [[], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH70_WEAK], [WARN_RNDSIG_KEY]],
+ 'x509v3-sign-rsa': [[], [FAIL_HASH_WEAK], [], [INFO_OPENSSH82_FUTURE_DEPRECATION]],
+ 'x509v3-sign-rsa-sha256@ssh.com': [[]],
+ 'x509v3-ssh-dss': [[], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH70_WEAK], [WARN_RNDSIG_KEY]],
+ 'x509v3-ssh-rsa': [[], [FAIL_HASH_WEAK], [], [INFO_OPENSSH82_FUTURE_DEPRECATION]],
+ 'ssh-rsa-cert-v00@openssh.com': [['5.4', '6.9'], [FAIL_OPENSSH70_LEGACY, FAIL_HASH_WEAK], [], [INFO_OPENSSH82_FUTURE_DEPRECATION]],
+ 'ssh-dss-cert-v00@openssh.com': [['5.4', '6.9'], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH70_LEGACY], [WARN_RNDSIG_KEY]],
+ 'ssh-rsa-cert-v01@openssh.com': [['5.6'], [FAIL_HASH_WEAK], [], [INFO_OPENSSH82_FUTURE_DEPRECATION]],
+ 'ssh-dss-cert-v01@openssh.com': [['5.6', '6.9'], [FAIL_1024BIT_MODULUS, FAIL_OPENSSH70_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-nistp256-cert-v01@openssh.com': [['5.7'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-nistp384-cert-v01@openssh.com': [['5.7'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'ecdsa-sha2-nistp521-cert-v01@openssh.com': [['5.7'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'rsa-sha2-256-cert-v01@openssh.com': [['7.8']],
+ 'rsa-sha2-512-cert-v01@openssh.com': [['7.8']],
+ 'ssh-rsa-sha256@ssh.com': [[]],
+ 'ssh-dss-sha256@ssh.com': [[], [FAIL_1024BIT_MODULUS]],
+ 'sk-ecdsa-sha2-nistp256-cert-v01@openssh.com': [['8.2'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'sk-ecdsa-sha2-nistp256@openssh.com': [['8.2'], [WARN_CURVES_WEAK], [WARN_RNDSIG_KEY]],
+ 'sk-ssh-ed25519-cert-v01@openssh.com': [['8.2']],
+ 'sk-ssh-ed25519@openssh.com': [['8.2']],
+ 'ssh-gost2001': [[], [], [WARN_UNTRUSTED]],
+ 'ssh-gost2012-256': [[], [], [WARN_UNTRUSTED]],
+ 'ssh-gost2012-512': [[], [], [WARN_UNTRUSTED]],
+ 'spi-sign-rsa': [[]],
+ 'ssh-ed448': [[]],
+ 'x509v3-ecdsa-sha2-nistp256': [[], [WARN_CURVES_WEAK]],
+ 'x509v3-ecdsa-sha2-nistp384': [[], [WARN_CURVES_WEAK]],
+ 'x509v3-ecdsa-sha2-nistp521': [[], [WARN_CURVES_WEAK]],
+ 'x509v3-rsa2048-sha256': [[]],
+ },
+ 'enc': {
+ 'none': [['1.2.2,d2013.56,l10.2'], [FAIL_PLAINTEXT]],
+ 'des': [[], [FAIL_WEAK_CIPHER], [WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ 'des-cbc': [[], [FAIL_WEAK_CIPHER], [WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ 'des-cbc@ssh.com': [[], [FAIL_WEAK_CIPHER], [WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ 'des-cbc-ssh1': [[], [FAIL_WEAK_CIPHER], [WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ '3des': [[], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH74_UNSAFE, WARN_CIPHER_WEAK, WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ '3des-cbc': [['1.2.2,d0.28,l10.2', '6.6', None], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH74_UNSAFE, WARN_CIPHER_WEAK, WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ '3des-ctr': [['d0.52'], [FAIL_WEAK_CIPHER]],
+ 'blowfish': [[], [FAIL_WEAK_ALGORITHM], [WARN_BLOCK_SIZE]],
+ 'blowfish-cbc': [['1.2.2,d0.28,l10.2', '6.6,d0.52', '7.1,d0.52'], [FAIL_OPENSSH67_UNSAFE, FAIL_DBEAR53_DISABLED], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ 'blowfish-ctr': [[], [FAIL_OPENSSH67_UNSAFE, FAIL_DBEAR53_DISABLED], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ 'twofish-cbc': [['d0.28', 'd2014.66'], [FAIL_DBEAR67_DISABLED], [WARN_CIPHER_MODE]],
+ 'twofish128-cbc': [['d0.47', 'd2014.66'], [FAIL_DBEAR67_DISABLED], [WARN_CIPHER_MODE]],
+ 'twofish192-cbc': [[], [], [WARN_CIPHER_MODE]],
+ 'twofish256-cbc': [['d0.47', 'd2014.66'], [FAIL_DBEAR67_DISABLED], [WARN_CIPHER_MODE]],
+ 'twofish-ctr': [[]],
+ 'twofish128-ctr': [['d2015.68']],
+ 'twofish192-ctr': [[]],
+ 'twofish256-ctr': [['d2015.68']],
+ 'serpent128-cbc': [[], [FAIL_DEPRECATED_CIPHER], [WARN_CIPHER_MODE]],
+ 'serpent192-cbc': [[], [FAIL_DEPRECATED_CIPHER], [WARN_CIPHER_MODE]],
+ 'serpent256-cbc': [[], [FAIL_DEPRECATED_CIPHER], [WARN_CIPHER_MODE]],
+ 'serpent128-ctr': [[], [FAIL_DEPRECATED_CIPHER]],
+ 'serpent192-ctr': [[], [FAIL_DEPRECATED_CIPHER]],
+ 'serpent256-ctr': [[], [FAIL_DEPRECATED_CIPHER]],
+ 'idea-cbc': [[], [FAIL_DEPRECATED_CIPHER], [WARN_CIPHER_MODE]],
+ 'idea-ctr': [[], [FAIL_DEPRECATED_CIPHER]],
+ 'cast128-ctr': [[], [FAIL_DEPRECATED_CIPHER]],
+ 'cast128-cbc': [['2.1.0', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_MODE, WARN_BLOCK_SIZE]],
+ 'arcfour': [['2.1.0', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_WEAK]],
+ 'arcfour128': [['4.2', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_WEAK]],
+ 'arcfour256': [['4.2', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_WEAK]],
+ 'aes128-cbc': [['2.3.0,d0.28,l10.2', '6.6', None], [FAIL_OPENSSH67_UNSAFE], [WARN_CIPHER_MODE]],
+ 'aes192-cbc': [['2.3.0,l10.2', '6.6', None], [FAIL_OPENSSH67_UNSAFE], [WARN_CIPHER_MODE]],
+ 'aes256-cbc': [['2.3.0,d0.47,l10.2', '6.6', None], [FAIL_OPENSSH67_UNSAFE], [WARN_CIPHER_MODE]],
+ 'rijndael128-cbc': [['2.3.0', '3.0.2'], [FAIL_OPENSSH31_REMOVE], [WARN_CIPHER_MODE]],
+ 'rijndael192-cbc': [['2.3.0', '3.0.2'], [FAIL_OPENSSH31_REMOVE], [WARN_CIPHER_MODE]],
+ 'rijndael256-cbc': [['2.3.0', '3.0.2'], [FAIL_OPENSSH31_REMOVE], [WARN_CIPHER_MODE]],
+ 'rijndael-cbc@lysator.liu.se': [['2.3.0', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_CIPHER_MODE]],
+ 'aes128-ctr': [['3.7,d0.52,l10.4.1']],
+ 'aes192-ctr': [['3.7,l10.4.1']],
+ 'aes256-ctr': [['3.7,d0.52,l10.4.1']],
+ 'aes128-gcm': [[]],
+ 'aes256-gcm': [[]],
+ 'AEAD_AES_128_GCM': [[]],
+ 'AEAD_AES_256_GCM': [[]],
+ 'aes128-gcm@openssh.com': [['6.2']],
+ 'aes256-gcm@openssh.com': [['6.2']],
+ 'chacha20-poly1305': [[], [], [], [INFO_OPENSSH69_CHACHA]],
+ 'chacha20-poly1305@openssh.com': [['6.5'], [], [], [INFO_OPENSSH69_CHACHA]],
+ 'camellia128-cbc': [[], [], [WARN_CIPHER_MODE]],
+ 'camellia128-ctr': [[]],
+ 'camellia192-cbc': [[], [], [WARN_CIPHER_MODE]],
+ 'camellia192-ctr': [[]],
+ 'camellia256-cbc': [[], [], [WARN_CIPHER_MODE]],
+ 'camellia256-ctr': [[]],
+ 'crypticore128@ssh.com': [[], [FAIL_UNPROVEN]],
+ 'seed-cbc@ssh.com': [[], [], [WARN_OBSOLETE, WARN_CIPHER_MODE]],
+ },
+ 'mac': {
+ 'none': [['d2013.56'], [FAIL_PLAINTEXT]],
+ 'hmac-sha1': [['2.1.0,d0.28,l10.2'], [], [WARN_ENCRYPT_AND_MAC, WARN_HASH_WEAK]],
+ 'hmac-sha1-96': [['2.5.0,d0.47', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_ENCRYPT_AND_MAC, WARN_HASH_WEAK]],
+ 'hmac-sha2-56': [[], [], [WARN_TAG_SIZE, WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha2-224': [[], [], [WARN_TAG_SIZE, WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha2-256': [['5.9,d2013.56,l10.7.0'], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha2-256-96': [['5.9', '6.0'], [FAIL_OPENSSH61_REMOVE], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha2-384': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha2-512': [['5.9,d2013.56,l10.7.0'], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha2-512-96': [['5.9', '6.0'], [FAIL_OPENSSH61_REMOVE], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha3-224': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha3-256': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha3-384': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha3-512': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha256': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha256-96@ssh.com': [[], [], [WARN_ENCRYPT_AND_MAC, WARN_TAG_SIZE]],
+ 'hmac-sha256@ssh.com': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha512': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha512@ssh.com': [[], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-md5': [['2.1.0,d0.28', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_ENCRYPT_AND_MAC, WARN_HASH_WEAK]],
+ 'hmac-md5-96': [['2.5.0', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_ENCRYPT_AND_MAC, WARN_HASH_WEAK]],
+ 'hmac-ripemd': [[], [FAIL_DEPRECATED_MAC], [WARN_OPENSSH72_LEGACY, WARN_ENCRYPT_AND_MAC]],
+ 'hmac-ripemd160': [['2.5.0', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_ENCRYPT_AND_MAC]],
+ 'hmac-ripemd160-96': [[], [FAIL_DEPRECATED_MAC], [WARN_ENCRYPT_AND_MAC, WARN_TAG_SIZE]],
+ 'hmac-ripemd160@openssh.com': [['2.1.0', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_ENCRYPT_AND_MAC]],
+ 'umac-64@openssh.com': [['4.7'], [], [WARN_ENCRYPT_AND_MAC, WARN_TAG_SIZE]],
+ 'umac-128@openssh.com': [['6.2'], [], [WARN_ENCRYPT_AND_MAC]],
+ 'hmac-sha1-etm@openssh.com': [['6.2'], [], [WARN_HASH_WEAK]],
+ 'hmac-sha1-96-etm@openssh.com': [['6.2', '6.6', None], [FAIL_OPENSSH67_UNSAFE], [WARN_HASH_WEAK]],
+ 'hmac-sha2-256-96-etm@openssh.com': [[], [], [WARN_TAG_SIZE_96]], # Despite the @openssh.com tag, it doesn't appear that this was ever shipped with OpenSSH; it is only implemented in AsyncSSH (?).
+ 'hmac-sha2-512-96-etm@openssh.com': [[], [], [WARN_TAG_SIZE_96]], # Despite the @openssh.com tag, it doesn't appear that this was ever shipped with OpenSSH; it is only implemented in AsyncSSH (?).
+ 'hmac-sha2-256-etm@openssh.com': [['6.2']],
+ 'hmac-sha2-512-etm@openssh.com': [['6.2']],
+ 'hmac-md5-etm@openssh.com': [['6.2', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_HASH_WEAK]],
+ 'hmac-md5-96-etm@openssh.com': [['6.2', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY, WARN_HASH_WEAK]],
+ 'hmac-ripemd160-etm@openssh.com': [['6.2', '6.6', '7.1'], [FAIL_OPENSSH67_UNSAFE], [WARN_OPENSSH72_LEGACY]],
+ 'umac-32@openssh.com': [[], [], [WARN_ENCRYPT_AND_MAC, WARN_TAG_SIZE]], # Despite having the @openssh.com suffix, this may never have shipped with OpenSSH (!).
+ 'umac-64-etm@openssh.com': [['6.2'], [], [WARN_TAG_SIZE]],
+ 'umac-96@openssh.com': [[], [], [WARN_ENCRYPT_AND_MAC]], # Despite having the @openssh.com suffix, this may never have shipped with OpenSSH (!).
+ 'umac-128-etm@openssh.com': [['6.2']],
+ 'aes128-gcm': [[]],
+ 'aes256-gcm': [[]],
+ 'chacha20-poly1305@openssh.com': [[]], # Despite the @openssh.com tag, this was never shipped as a MAC in OpenSSH (only as a cipher); it is only implemented as a MAC in Syncplify.
+ 'crypticore-mac@ssh.com': [[], [FAIL_UNPROVEN]],
+ 'AEAD_AES_128_GCM': [[]],
+ 'AEAD_AES_256_GCM': [[]],
+ }
+ }
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-12 14:00:30 +0000