{"id":119889,"date":"2024-09-20T21:43:01","date_gmt":"2024-09-20T19:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-9-9-s-podderzhkoj-algoritma-postkvantovogo-shifrovaniya-ml-kem"},"modified":"2024-09-20T21:43:01","modified_gmt":"2024-09-20T19:43:01","slug":"reliz-openssh-9-9-s-podderzhkoj-algoritma-postkvantovogo-shifrovaniya-ml-kem","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/reliz-openssh-9-9-s-podderzhkoj-algoritma-postkvantovogo-shifrovaniya-ml-kem","title":{"rendered":"OpenSSH 9.9 release with support for the post-quantum encryption algorithm ML-KEM.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The release of OpenSSH 9.9 has been published, an open implementation of the client and server for working with SSH 2.0 and SFTP protocols. Key changes include: <\/p>\n
\n
SSH and sshd now support the hybrid key exchange algorithm «mlkem768x25519-sha256», which is resilient against quantum computer attacks and combines X25519 ECDH with the ML-KEM algorithm (CRYSTALS-Kyber), recently standardized by the National Institute of Standards and Technology (NIST). ML-KEM utilizes cryptographic methods based on solving lattice theory problems, which do not differ in solution time between classical and quantum computers.\n
The sshd_config configuration file has been updated with the keyword «RefuseConnection», which causes sshd to terminate connections after the first authentication attempt. The PerSourcePenalties directive has added the class «refuseconnection», applied when the connection is terminated following a «RefuseConnection» trigger.\n
Support for data compression before authentication has been discontinued in the ssh client, significantly reducing the attack surface on SSH servers and mitigating the risks of indirect methods of information analysis during the authentication process. In server<\/a> sshd, compression before authentication was disabled earlier.\n