Recently, I've done some work to update algorithm support in lsh. Added diffie-hellman-group14-sha256 and curve25519 keyexchange, hmac-sha2-256 and hmac-sha2-512 macs, deleted hmac-md5. I'm halfway through adding support for rsa-sha2-256 and rsa-sha2-512 for signatures (RFC 8332).
Questions: * How important is it to keep ssh-rsa (using sha1)? I'm considering by default doing rsa-sha2-256 only for all rsa signatures, with a command line option to switch to a different hash function (sha1 (reprecated) or sha2-512). Do we need a more flexible default behavior? Answer may be different for host/userauth signatures, and for client/server behavior. * For fingerprints, lsh used to display old-style md5 fingerprints and sha1-based "bubble babble". Openssh key fingerprints now use sha256 with base64 encoding, which makes sense. Is there any reason to support other fingerprints variants than openssh's ? Regards, /Niels -- Niels Möller. PGP key CB4962D070D77D7FCB8BA36271D8F1FF368C6677. Internet email is subject to wholesale government surveillance. _______________________________________________ lsh-bugs mailing list -- [email protected] To unsubscribe send an email to [email protected]
