Support newer SSH Ciphers and MACs

[ypid]

Would it be possible to support more crypto algorithms which recent versions of OpenSSH support?

From man ssh_config on Debian Jessie.

• MACs

  [email protected],[email protected],
  [email protected],[email protected],
  [email protected],[email protected],
  hmac-sha2-256,hmac-sha2-512,
  [email protected],[email protected],
  [email protected],
  [email protected],[email protected],
  hmac-md5,hmac-sha1,hmac-ripemd160,
  hmac-sha1-96,hmac-md5-96

• Ciphers

  aes128-ctr,aes192-ctr,aes256-ctr,
  [email protected],[email protected],
  [email protected],
  arcfour256,arcfour128,
  aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,
  aes192-cbc,aes256-cbc,arcfour

• KexAlgorithms

  [email protected],
  ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,
  diffie-hellman-group-exchange-sha256,
  diffie-hellman-group14-sha1,
  diffie-hellman-group-exchange-sha1,
  diffie-hellman-group1-sha1

Related to: darkoperator/Posh-SSH#103
Partly related to: #20

[Cronus89]

Any plan for this? I'm having the issue in software that uses your ssh lib. ShareX/ShareX#3599

[Kim-SSi]

It might be useful to look at the following repos for 25519 related code, licensed as public domain or MIT:
https://github.com/CodesInChaos/Chaos.NaCl
Some additional code & tests to the above:
https://github.com/CryptoManiac/Ed25519

[AtosNicoS]

I recently also ran into this issue, I am unable to acces a Teltonika router anymore:
#461

Please implement some of the newer ciphers.

[stijnbrouwers]

+1

[marcob73]

It seems aes128-ctr, aes192-ctr and aes256-ctr are currently supported.
Is it there any schedule to add support also to the following?

• Ciphers
  [email protected],[email protected],
  [email protected]

Thank and Best Regards,
Marco

[drieseng]

In the next beta, we'll add support for the following key exchange algorithms:

• curve25519-sha256
• curve25519-sha256@libssh.org
• ecdh-sha2-nistp256
• ecdh-sha2-nistp384
• ecdh-sha2-nistp521
• diffie-hellman-group14-sha256
• diffie-hellman-group16-sha512

and we've added support for the following host key algorithms:

• ssh-ed25519
• ecdsa-sha2-nistp256
• ecdsa-sha2-nistp384
• ecdsa-sha2-nistp521

[drieseng]

2020.0.0-beta1 is now available.