crypto

Files

T

Nicola e3d1254f1e ssh/agent: don't accept keys with unsupported constraints

The in-memory keyring cannot enforce constraint extensions, so silently
accepting a key that carries them gave callers a false sense of
restriction. Refuse keys with constraint extensions instead: a key
whose constraints cannot be enforced must not be loaded. This behavior
is consistent with OpenSSH.

This is a deliberate behavior change: keyring.Add previously accepted
and ignored ConstraintExtensions and now returns an error.

This issue was found during a security audit by NCC Group Cryptography
Services, sponsored by Teleport.

Fixes CVE-2026-39832
Fixes golang/go#79435

Change-Id: I6ca4f1c29f8edfabb287fe07299641f70896d5fe
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/778641
Auto-Submit: Neal Patel <nealpatel@google.com>
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Neal Patel <neal@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Neal Patel <nealpatel@google.com>

2026-05-21 10:47:08 -07:00

client_test.go

ssh/agent: preserve constraint extensions when adding keys

2026-05-21 10:43:27 -07:00

client.go

ssh/agent: preserve constraint extensions when adding keys

2026-05-21 10:43:27 -07:00

example_test.go

ssh/agent: fix example

2019-11-22 22:04:53 +00:00

forward.go

go.crypto: use golang.org/x/... import paths