OpenSSH is a complete implementation of the SSH protocol 2.0, also including support for SFTP.
This release includes support for hardware authenticators FIDO/U2F. FIDO devices are now supported under the new key types "ecdsa-sk" and "ed25519-sk", along with the corresponding certificates.
This release includes a number of changes that may affect existing
configurations:
- Removal of "ssh-rsa" from the CASignatureAlgorithms lists. Now, when signing new certificates, "rsa-sha2-512" will be used by default;
- The diffie-hellman-group14-sha1 algorithm has been removed for both client and server;
- When using the ps utility, the sshd process header now displays the number of connections attempting to authenticate and the limits set by MaxStartups;
- A new executable file ssh-sk-helper has been added. It is intended for isolating FIDO/U2F libraries.
It was also announced that support for the SHA-1 hash algorithm will soon be discontinued.
Source: linux.org.ru
