Skip to content

Commit 23b1b90

Browse files
drakkangopherbot
authored andcommitted
ssh: prefer sha256 based MAC algorithms
sha256 is more optimized than sha512 in Go and is secure enough so prefer sha256 over sha512. Fixes golang/go#61138 Change-Id: I7658808655367f1ab5f4ac8b52e6b20bd30ebf87 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/507555 Run-TryBot: Filippo Valsorda <[email protected]> Reviewed-by: Filippo Valsorda <[email protected]> Auto-Submit: Filippo Valsorda <[email protected]> Reviewed-by: Joedian Reid <[email protected]> TryBot-Result: Gopher Robot <[email protected]> Reviewed-by: Dmitri Shuralyov <[email protected]>
1 parent e984872 commit 23b1b90

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ssh/common.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@ var supportedHostKeyAlgos = []string{
8585
// This is based on RFC 4253, section 6.4, but with hmac-md5 variants removed
8686
// because they have reached the end of their useful life.
8787
var supportedMACs = []string{
88-
"hmac-sha2-512[email protected]", "hmac-sha2-256[email protected]", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1", "hmac-sha1-96",
88+
"hmac-sha2-256[email protected]", "hmac-sha2-512[email protected]", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1", "hmac-sha1-96",
8989
}
9090

9191
var supportedCompressions = []string{compressionNone}

0 commit comments

Comments
 (0)