OpenSSH Implements Post-Quantum Cryptography for Secure SSH Connections
By
throw0101d
9mo ago· 5 min readenNews
80/100
Golden Brown
Bagelometer↗
Crisp on the outside, thoughtful on the inside. A keeper.
Score80TypenewsSentimentneutral
Summary
OpenSSH has integrated post-quantum cryptography algorithms to safeguard SSH connections against quantum computer attacks. Starting with OpenSSH 9.0, the sntrup761x25519-sha512 algorithm was introduced, followed by mlkem768x25519-sha256 in OpenSSH 9.9, which became the default in OpenSSH 10.0. OpenSSH 10.1 will warn users to encourage migration to these stronger algorithms.
Key quotes
· 3 pulledOpenSSH supports a number of cryptographic key agreement algorithms considered to be safe against attacks from quantum computers.
OpenSSH has offered post-quantum key agreement (KexAlgorithms) by default since release 9.0 (2022), initially via the sntrup761x25519-sha512 algorithm.
To encourage migration to these stronger algorithms, OpenSSH 10.1 will warn the user when a
OpenSSH post quantum cryptography
