Nicola Murino eab9315960 ssh: add diffie-hellman-group16-sha512 kex ...

This group is disabled by default because it is a bit slower than
the others.
The group18-sha512 variant is too slow to include.

Benchstat results including diffie-hellman-group18-sha512:

name                                           time/op
Kexes/diffie-hellman-group-exchange-sha256-12  22.6ms ± 9%
Kexes/diffie-hellman-group18-sha512-12          1.15s ±11%
Kexes/ecdh-sha2-nistp384-12                    3.91ms ± 6%
Kexes/ecdh-sha2-nistp256-12                     304µs ± 5%
Kexes/curve25519-sha256@libssh.org-12           413µs ± 7%
Kexes/ecdh-sha2-nistp521-12                    11.6ms ±13%
Kexes/curve25519-sha256-12                      361µs ± 5%
Kexes/diffie-hellman-group-exchange-sha1-12    22.9ms ± 9%
Kexes/diffie-hellman-group1-sha1-12            3.59ms ± 6%
Kexes/diffie-hellman-group14-sha1-12           22.1ms ±11%
Kexes/diffie-hellman-group14-sha256-12         21.6ms ± 8%
Kexes/diffie-hellman-group16-sha512-12          138ms ± 9%

name                                           alloc/op
Kexes/diffie-hellman-group-exchange-sha256-12  67.8kB ± 1%
Kexes/diffie-hellman-group18-sha512-12          243kB ± 9%
Kexes/ecdh-sha2-nistp384-12                    13.9kB ± 0%
Kexes/ecdh-sha2-nistp256-12                    12.1kB ± 0%
Kexes/curve25519-sha256@libssh.org-12          8.22kB ± 0%
Kexes/ecdh-sha2-nistp521-12                    16.5kB ± 0%
Kexes/curve25519-sha256-12                     8.22kB ± 0%
Kexes/diffie-hellman-group-exchange-sha1-12    67.5kB ± 0%
Kexes/diffie-hellman-group1-sha1-12            34.9kB ± 0%
Kexes/diffie-hellman-group14-sha1-12           61.9kB ± 0%
Kexes/diffie-hellman-group14-sha256-12         62.0kB ± 0%
Kexes/diffie-hellman-group16-sha512-12          117kB ± 0%

name                                           allocs/op
Kexes/diffie-hellman-group-exchange-sha256-12     314 ± 0%
Kexes/diffie-hellman-group18-sha512-12            271 ± 4%
Kexes/ecdh-sha2-nistp384-12                       243 ± 0%
Kexes/ecdh-sha2-nistp256-12                       213 ± 0%
Kexes/curve25519-sha256@libssh.org-12             168 ± 0%
Kexes/ecdh-sha2-nistp521-12                       245 ± 0%
Kexes/curve25519-sha256-12                        168 ± 0%
Kexes/diffie-hellman-group-exchange-sha1-12       314 ± 0%
Kexes/diffie-hellman-group1-sha1-12               255 ± 0%
Kexes/diffie-hellman-group14-sha1-12              255 ± 0%
Kexes/diffie-hellman-group14-sha256-12            255 ± 0%
Kexes/diffie-hellman-group16-sha512-12            256 ± 0%

Change-Id: Id119401fda7e417675325f37e3d442e70585206c
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/506839
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Cherry Mui <cherryyz@google.com>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: David Chase <drchase@google.com>
Reviewed-by: Filippo Valsorda <filippo@golang.org>

2023-07-31 17:46:52 +00:00

..

agent

ssh: disable client agent tests on Windows

2023-07-13 13:29:36 +00:00

internal/bcrypt_pbkdf

ssh: support encrypted OpenSSH private keys

2020-02-04 10:40:54 +00:00

knownhosts

all: fix some comments

2023-01-30 18:50:24 +00:00

terminal

ssh/terminal: replace with a golang.org/x/term wrapper

2020-11-16 15:36:03 +00:00

test

ssh: add diffie-hellman-group16-sha512 kex

2023-07-31 17:46:52 +00:00

testdata

ssh: don't advertise rsa-sha2 algorithms if we can't use them

2022-03-14 23:46:59 +00:00

benchmark_test.go

all: fix ineffectual assignments

2019-01-31 18:25:04 +00:00

buffer_test.go

…

buffer.go

…

certs_test.go

all: gofmt

2022-04-11 22:02:26 +00:00

certs.go

all: replace bytes.Compare with bytes.Equal

2022-10-05 02:52:14 +00:00

channel.go

…

cipher_test.go

ssh: add support for aes256-gcm@openssh.com

2023-02-15 20:22:00 +00:00

cipher.go

ssh: add support for aes256-gcm@openssh.com

2023-02-15 20:22:00 +00:00

client_auth_test.go

ssh: fix RSA certificate and public key authentication with older clients

2023-07-10 19:57:54 +00:00

client_auth.go

ssh: support rsa-sha2-256/512 for client certificates

2022-03-15 16:07:06 +00:00

client_test.go

ssh: ignore invalid MACs and KEXs just like we do for ciphers

2023-07-31 15:35:32 +00:00

client.go

ssh: don't advertise rsa-sha2 algorithms if we can't use them

2022-03-14 23:46:59 +00:00

common_test.go

ssh: invert algorithm choices on the server

2019-04-18 16:56:55 +00:00

common.go

ssh: add diffie-hellman-group16-sha512 kex

2023-07-31 17:46:52 +00:00

connection.go

all: fix some comments

2023-03-20 20:33:29 +00:00

doc.go

all: gofmt

2022-04-11 22:02:26 +00:00

example_test.go

all: replace io/ioutil with io and os package

2022-09-19 17:36:07 +00:00

handshake_test.go

ssh: skip unsupported tests on wasip1

2023-04-18 17:07:48 +00:00

handshake.go

ssh: ensure that handshakeTransport goroutines have finished before Close returns

2022-12-12 22:32:12 +00:00

kex_test.go

ssh: add diffie-hellman-group16-sha512 kex

2023-07-31 17:46:52 +00:00

kex.go

ssh: add diffie-hellman-group16-sha512 kex

2023-07-31 17:46:52 +00:00

keys_test.go

ssh: deprecate and replace SigAlgo constants

2022-03-14 23:46:46 +00:00

keys.go

ssh: document that ParseRawPrivateKey supports Ed25519 keys

2023-03-13 12:45:00 +00:00

mac.go

ssh: add hmac-sha2-512

2023-06-22 14:36:59 +00:00

mempipe_test.go

…

messages_test.go

…

messages.go

ssh: fix typo

2022-11-04 14:06:20 +00:00

mux_test.go

all: replace io/ioutil with io and os package

2022-09-19 17:36:07 +00:00

mux.go

ssh: don't err out on channel request msgs to unknown channels

2020-06-02 18:02:16 +00:00

server.go

ssh: fix RSA certificate and public key authentication with older clients

2023-07-10 19:57:54 +00:00

session_test.go

ssh: add ServerConfig.NoClientAuthCallback

2022-10-10 15:29:10 +00:00

session.go

all: replace io/ioutil with io and os package

2022-09-19 17:36:07 +00:00

ssh_gss_test.go

ssh/gss: support kerberos authentication for ssh server and client

2019-05-10 10:41:15 +00:00

ssh_gss.go

ssh/gss: support kerberos authentication for ssh server and client

2019-05-10 10:41:15 +00:00

streamlocal.go

ssh: also start forward listeners on ListenUnix

2018-05-14 16:50:30 +00:00

tcpip_test.go

…

tcpip.go

ssh: don't start goroutines handling forwarded connections until needed

2018-05-14 11:17:49 +00:00

testdata_test.go

ssh: don't advertise rsa-sha2 algorithms if we can't use them

2022-03-14 23:46:59 +00:00

transport_test.go

ssh: fix protocol version exchange (for multi-line)

2018-01-11 10:11:23 +00:00

transport.go

ssh: add support for aes256-gcm@openssh.com

2023-02-15 20:22:00 +00:00