GitHub adalengeza kusintha kwa ntchito yokhudzana ndi kulimbikitsa chitetezo cha Git protocol yomwe imagwiritsidwa ntchito panthawi ya git push ndi git pull ntchito kudzera pa SSH kapena "git://" scheme (zopempha kudzera pa https:// sizidzakhudzidwa ndi kusintha). Zosintha zikayamba kuchitika, kulumikizana ndi GitHub kudzera pa SSH kudzafunika mtundu wa OpenSSH 7.2 (wotulutsidwa mu 2016) kapena mtundu wa PuTTY 0.75 (wotulutsidwa mu Meyi chaka chino). Mwachitsanzo, kugwirizana ndi kasitomala wa SSH wophatikizidwa mu CentOS 6 ndi Ubuntu 14.04, zomwe sizikuthandizidwanso, zidzasweka.
Zosinthazi zikuphatikiza kuchotsedwa kwa chithandizo cha mafoni osadziwika kupita ku Git (kudzera "git: //") ndikuwonjezera zofunikira zamakiyi a SSH omwe amagwiritsidwa ntchito polowa GitHub. GitHub idzasiya kuthandizira makiyi onse a DSA ndi ma algorithms amtundu wa SSH monga CBC ciphers (aes256-cbc, aes192-cbc aes128-cbc) ndi HMAC-SHA-1. Kuonjezera apo, zofunikira zina zikuyambitsidwa kwa makiyi atsopano a RSA (kugwiritsa ntchito SHA-1 kudzaletsedwa) ndi chithandizo cha makiyi a ECDSA ndi Ed25519 akugwira ntchito.
Zosintha zidzayamba pang'onopang'ono. Pa Seputembala 14, makiyi atsopano a ECDSA ndi Ed25519 adzapangidwa. Pa Novembara 2, kuthandizira kwa makiyi atsopano a SHA-1-based RSA kudzayimitsidwa (makiyi opangidwa kale apitiliza kugwira ntchito). Pa Novembara 16, kuthandizira makiyi olandila potengera ma aligorivimu a DSA adzasiyidwa. Pa Januware 11, 2022, kuthandizira ma aligorivimu akale a SSH komanso kuthekera kofikira popanda kubisa kudzayimitsidwa kwakanthawi ngati kuyesa. Pa Marichi 15, chithandizo cha ma algorithms akale chidzazimitsidwa kwathunthu.
Kuphatikiza apo, titha kuzindikira kuti kusintha kosasintha kwapangidwa ku OpenSSH codebase komwe kumalepheretsa kukonza makiyi a RSA kutengera SHA-1 hash ("ssh-rsa"). Kuthandizira makiyi a RSA okhala ndi SHA-256 ndi SHA-512 hashes (rsa-sha2-256/512) sikunasinthe. Kuyimitsidwa kwa kuthandizira makiyi a "ssh-rsa" ndi chifukwa chakuchulukirachulukira kwa ziwopsezo zogundana ndi mawu oyambira (mtengo wosankha kugunda ukuyerekeza pafupifupi madola 50 zikwi). Kuti muyese kugwiritsa ntchito ssh-rsa pamakina anu, mutha kuyesa kulumikiza kudzera ssh ndi "-oHostKeyAlgorithms=-ssh-rsa" njira.
Source: opennet.ru