All Topics

Technology

Art

GitHub Implements Post-Quantum Secure SSH Key Exchange for Enhanced Git Data Protection

brian m. carlson

8mo ago· 6 min readenNews

100/100

Golden Brown

Bagelometer↗

A baker's-dozen of insight crammed into one ring.

Score100TypenewsSentimentpositive

Summary

GitHub is introducing post-quantum secure SSH key exchange algorithms (sntrup761x25519-sha512) to enhance security for Git data access. This change only affects SSH connections and not HTTPS access, and specifically excludes GitHub Enterprise Cloud with US data residency. The update aims to protect data both currently and against future quantum computing threats.

Key quotes

· 4 pulled

We're adding a new post-quantum secure SSH key exchange algorithm, known alternately as sntrup761x25519-sha512 and [email protected], to our SSH endpoints for accessing Git data

This only affects SSH access and doesn't impact HTTPS access at all

It also does not affect GitHub Enterprise Cloud with data residency in the United States region

These changes will keep your data secure both now and far into the future

Snippet from the RSS feed

GitHub is introducing post-quantum secure key exchange methods for SSH access to better protect Git data in transit.

You might also wanna read

OpenSSH Implements Post-Quantum Cryptography for Secure SSH Connections

OpenSSH has integrated post-quantum cryptography algorithms to safeguard SSH connections against quantum computer attacks. Starting with Ope

openssh.com·9mo ago

GitHub Launches Immutable Releases for Enhanced Software Supply Chain Security

GitHub has introduced immutable releases as a general availability feature, providing enhanced supply chain security. Once a release is mark

github.blog·7mo ago

Using SSH Certificates for Secure Git Commit Signing and Code Authorship Verification

The article discusses the importance of code authorship verification in software development, highlighting the limitations of traditional au

codon.org.uk·2mo ago

Managing SSH Keys in .git Directory for Repository Portability and Account Isolation

The article describes a technical solution for managing SSH keys in Git repositories to prevent accidental pushes from the wrong account. Th

dansjots.github.io·5mo ago

Critical RCE vulnerability CVE-2026-3854 discovered in GitHub's internal git infrastructure

Wiz Research discovered a critical vulnerability (CVE-2026-3854) in GitHub's internal git infrastructure affecting both GitHub.com and GitHu

wiz.io·1mo ago

GitHub Service Outage: Git Operations Failed Due to Expired TLS Certificate

GitHub experienced a service outage from November 18, 2025, 20:30 UTC to 21:34 UTC affecting all Git operations including SSH and HTTP clien

githubstatus.com·6mo ago