OpenSSH 10.4/10.4p1 Released

OpenSSH 10.4/10.4p1 Released(openssh.org)

23 points by throw0101a 3 hours ago | 6 comments

Panino 3 hours ago |

Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

When pq key agreement was added in 2019, it took almost 3 years for it to become enabled by default. This isn't criticism, just an observation. I don't have a pressing need for pq sigs. Always happy for new OpenSSH releases though!

throw0101a 58 minutes ago | |

> Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

The draft was only published a few months ago:

* https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e...

The draft is a 'personal document', so not associated with the IETF/WG.

throw0101a 3 hours ago |

HTML version of release notes:

* https://www.openssh.org/releasenotes.html#10.4

atonse 1 hour ago | |

Still looks like ascii, doesn’t automatically wrap, nor is it responsive.

Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

lousken 2 hours ago |

Is hmac-sha1 and umac-64 still enabled by default?

throw0101a 47 minutes ago | |

Yes:

* https://man.openbsd.org/ssh_config.5#MACs

* https://man.openbsd.org/sshd_config.5#MACs

ETM, encrypt-than-mac, variants are at the front of the preference list.

* https://en.wikipedia.org/wiki/UMAC_(cryptography)