Eric Brown 094676da4a ssh: drop dh-group1-sha1 from default key exchanges ...

This removes diffie-hellman-group1-sha1 from the list of default
key exchange algorithms. This kex is considered weak and potentially
vulnerable to the Logjam attack.

Note: This is a backwards incompatible change: if you connect to ssh
servers that do not support any key exchanges except for dh-group1-sha1,
you must now specify config.KeyExchanges explicity.

See also:
https://www.openssh.com/legacy.html
https://blog.gdssecurity.com/labs/2015/8/3/ssh-weak-diffie-hellman-group-identification-tool.html

Fixes golang/go#12955

Change-Id: I032d5175d63ab5d1912de72957a80200eb396bc9
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/123595
Reviewed-by: Han-Wen Nienhuys <hanwen@google.com>

2019-09-09 09:17:59 +00:00

..

agent

ssh/agent: add checking for empty SSH requests

2019-02-25 12:45:18 +00:00

knownhosts

crypto/ssh/knownhosts: fix out-of-date documentation for checkAddr

2019-01-23 08:56:48 +00:00

terminal

ssh/terminal: Use move-N sequences for >1 cursor moves

2019-03-25 15:42:30 +00:00

test

ssh/test: delete TestInvalidTerminalMode

2019-08-29 04:30:50 +00:00

testdata

ssh/testdata: correct typo

2018-10-15 02:39:09 +00:00

benchmark_test.go

all: fix ineffectual assignments

2019-01-31 18:25:04 +00:00

buffer_test.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

buffer.go

ssh: remove unused buffer.eof return value

2017-09-25 11:19:01 +00:00

certs_test.go

ssh: accept ed25519 certs

2017-12-18 18:48:59 +00:00

certs.go

ssh: support SSH agent signature flags and custom extensions

2018-10-29 10:30:14 +00:00

channel.go

all: fix errors reported by vet, golint

2017-11-28 17:48:09 +00:00

cipher_test.go

ssh: rename methods in packetCipher interface

2019-04-11 14:11:16 +00:00

cipher.go

ssh: rename methods in packetCipher interface

2019-04-11 14:11:16 +00:00

client_auth_test.go

ssh: add diffie-hellman-group-exchange-sha256

2019-06-17 13:33:40 +00:00

client_auth.go

ssh/gss: support kerberos authentication for ssh server and client

2019-05-10 10:41:15 +00:00

client_test.go

ssh: fix protocol version exchange (for multi-line)

2018-01-11 10:11:23 +00:00

client.go

all: fix typos

2018-10-29 02:12:03 +00:00

common_test.go

ssh: invert algorithm choices on the server

2019-04-18 16:56:55 +00:00

common.go

ssh: drop dh-group1-sha1 from default key exchanges

2019-09-09 09:17:59 +00:00

connection.go

ssh: fixing a small typo in connection.go

2017-05-31 07:46:08 +00:00

doc.go

ssh: require host key checking in the ClientConfig

2017-03-30 15:57:35 +00:00

example_test.go

ssh: rename ExampleHostKeyCheck to ExampleClientConfig_HostKeyCallback

2019-04-11 14:11:56 +00:00

handshake_test.go

ssh: skip testHandshakeErrorHandlingN on js/wasm

2019-07-01 09:49:42 +00:00

handshake.go

ssh: invert algorithm choices on the server

2019-04-18 16:56:55 +00:00

kex_test.go

x/crypto/ssh: close memPipe after running kex test.

2015-08-17 22:17:06 +00:00

kex.go

ssh: add diffie-hellman-group-exchange-sha256

2019-06-17 13:33:40 +00:00

keys_test.go

ssh: support SSH agent signature flags and custom extensions

2018-10-29 10:30:14 +00:00

keys.go

ssh: support SSH agent signature flags and custom extensions

2018-10-29 10:30:14 +00:00

mac.go

ssh: Add the hmac-sha2-256-etm@openssh.com algorithm

2017-02-08 15:25:40 +00:00

mempipe_test.go

ssh: fix spelling of test so that it runs

2015-07-15 23:39:58 +00:00

messages_test.go

x/crypto/ssh: support more keytypes in the agent.

2016-04-25 17:01:51 +00:00

messages.go

ssh: add diffie-hellman-group-exchange-sha256

2019-06-17 13:33:40 +00:00

mux_test.go

all: fix typos

2018-10-29 02:12:03 +00:00

mux.go

all: fix errors reported by vet, golint

2017-11-28 17:48:09 +00:00

server.go

ssh: add diffie-hellman-group-exchange-sha256

2019-06-17 13:33:40 +00:00

session_test.go

ssh: print server exit reason in tests

2019-04-11 14:19:40 +00:00

session.go

all: run gofmt -s on source code

2017-11-28 19:40:09 +00:00

ssh_gss_test.go

ssh/gss: support kerberos authentication for ssh server and client

2019-05-10 10:41:15 +00:00

ssh_gss.go

ssh/gss: support kerberos authentication for ssh server and client

2019-05-10 10:41:15 +00:00

streamlocal.go

ssh: also start forward listeners on ListenUnix

2018-05-14 16:50:30 +00:00

tcpip_test.go

go.crypto/ssh: import gosshnew.

2014-04-09 13:57:52 -07:00

tcpip.go

ssh: don't start goroutines handling forwarded connections until needed

2018-05-14 11:17:49 +00:00

testdata_test.go

x/crypto: fix typos

2016-07-06 16:40:51 +00:00

transport_test.go

ssh: fix protocol version exchange (for multi-line)

2018-01-11 10:11:23 +00:00

transport.go

ssh: rename methods in packetCipher interface

2019-04-11 14:11:16 +00:00