Re: Enable strong KexAlgorithms, Ciphers and MACs in /etc/ssh/sshd_config file on RHEL 8.x Linux OS
Kaushal Shriyan <[email protected]> Sat, 27 Jan 2024 20:57:08 +0530
| Newsgroups | gmane.linux.redhat.general |
|---|---|
| Message-ID | <CAD7Ssm_=BveeXixAOzTxYNBk0NTd2eTF5AN8PFdUwCp1vCv_gQ@mail.gmail.com> |
--0000000000006dcaf4060fef0cdd Content-Type: multipart/alternative; boundary="0000000000006dcaf2060fef0cdb" --0000000000006dcaf2060fef0cdb Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Jan 25, 2024 at 7:53=E2=80=AFPM Mike Burger <mburger@bubbanfriends.= org> wrote: > Hello, Kaushal. > > The first item in this Google search > <https://www.google.com/search?q=3DManage+ssh+ciphers+in+rhel+8&oq=3DMana= ge+ssh+ciphers+in+rhel+8> > is Red Hat's blog entry > <https://www.redhat.com/en/blog/configuring-rhel-8-compliance-crypto-poli= cy-related-cipher-block-chaining> > on the matter. > > On 2024-01-25 08:10, Kaushal Shriyan wrote: > > Hi, > > I am running the below servers on Red Hat Enterprise Linux release 8.7 > (Ootpa). The details are as follows. > > # rpm -qa | grep openssh > openssh-8.0p1-16.el8.x86_64 > openssh-askpass-8.0p1-16.el8.x86_64 > openssh-server-8.0p1-16.el8.x86_64 > openssh-clients-8.0p1-16.el8.x86_64 > > # cat /etc/redhat-release > Red Hat Enterprise Linux release 8.7 (Ootpa) > # > > How do I enable strong KexAlgorithms, Ciphers and MACs in > /etc/ssh/sshd_config file as per the above ssh server version. For exampl= e > as per below setting. > > KexAlgorithms > ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-g= roup-exchange-sha256 > Ciphers [email protected],[email protected], > [email protected],aes256-ctr,aes192-ctr,aes128-ctr > MACs [email protected],[email protected], > [email protected],hmac-sha2-512,hmac-sha2-256,[email protected] > > Please guide me. > > Thanks in advance. > > Best Regards, > > Kaushal > > > -- > You received this message because you are subscribed to the Google Groups= " > [email protected]" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > > > -- > <https://poplme.co/hash/lqQkxj0F/1/es> > > "It's always suicide-mission this, save-the-planet that. No one ever just > stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > > > Hi, I have followed https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/8/ht= ml/security_hardening/using-the-system-wide-cryptographic-policies_security= -hardening by setting the crypto policies as per below and used https://github.com/jtesta/ssh-audit for scanning the vulnerability. Starting audit of 192.168.0.108:22... # general (gen) banner: SSH-2.0-OpenSSH_8.0 (gen) software: OpenSSH 8.0 (gen) compatibility: OpenSSH 7.4+, Dropbear SSH 2018.76+ (gen) compression: enabled ([email protected]) # security (cve) CVE-2021-41617 -- (CVSSv2: 7.0) privilege escalation via supplemental groups (cve) CVE-2020-15778 -- (CVSSv2: 7.8) command injection via anomalous argument transfers (cve) CVE-2019-16905 -- (CVSSv2: 7.8) memory corruption and local code execution via pre-authentication integer overflow (cve) CVE-2016-20012 -- (CVSSv2: 5.3) enumerate usernames via challenge response # key exchange algorithms (kex) curve25519-sha256 -- [info] available since OpenSSH 7.4, Dropbear SSH 2018.76 (kex) curve25519-sha256 -- [info] default key exchange since OpenSSH 6.4 (kex) [email protected] -- [info] available since OpenSSH 6.4, Dropbear SSH 2013.62 (kex) [email protected] -- [info] default key exchange since OpenSSH 6.4 (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] available since OpenSSH 4.4 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] OpenSSH's GEX fallback mechanism was triggered during testing. Very old SSH clients will still be able to create connections using a 2048-bit modulus, though modern clients will use 3072. This can only be disabled by recompiling the code (see https://github.com/openssh/openssh-portable/blob/V_9_4/dh.c#L477)= . # host-key algorithms (key) rsa-sha2-512 (4096-bit) -- [info] available since OpenSSH 7.2 (key) rsa-sha2-256 (4096-bit) -- [info] available since OpenSSH 7.2 (key) ssh-ed25519 -- [info] available since OpenSSH 6.5 # encryption algorithms (ciphers) (enc) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) [email protected] -- [info] available since OpenSSH 6.5 (enc) [email protected] -- [info] default cipher since OpenSSH 6.9 (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 (enc) aes192-ctr -- [info] available since OpenSSH 3.7 (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 # message authentication code algorithms (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [info] available since OpenSSH 6.2 # fingerprints (fin) ssh-ed25519: SHA256:LF2lloHchhKq5Y0gZa9MFsK/wBVTd2sadVjFortIBy8 (fin) ssh-ed25519: MD5:67:c2:e6:8d:23:13:8a:54:1e:75:ff:66:4e:1e:8b:87 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case (fin) ssh-rsa: SHA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ (fin) ssh-rsa: MD5:2d:ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case # algorithm recommendations (for OpenSSH 8.0) (rec) [email protected] -- enc algorithm to remove # additional info (nfo) For hardening guides on common OSes, please see: < https://www.ssh-audit.com/hardening_guides.html> #update-crypto-policies --set FIPS # update-crypto-policies --show FIPS #./ssh-audit.py -vvv localhost Starting audit of localhost:22... # general (gen) banner: SSH-2.0-OpenSSH_8.0 (gen) software: OpenSSH 8.0 (gen) compatibility: OpenSSH 7.3+ (some functionality from 6.6), Dropbear SSH 2016.73+ (gen) compression: enabled ([email protected]) # security (cve) CVE-2021-41617 -- (CVSSv2: 7.0) privilege escalation via supplemental groups (cve) CVE-2020-15778 -- (CVSSv2: 7.8) command injection via anomalous argument transfers (cve) CVE-2019-16905 -- (CVSSv2: 7.8) memory corruption and local code execution via pre-authentication integer overflow (cve) CVE-2016-20012 -- (CVSSv2: 5.3) enumerate usernames via challenge response # key exchange algorithms (kex) ecdh-sha2-nistp256 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (kex) ecdh-sha2-nistp256 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp384 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (kex) ecdh-sha2-nistp384 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp521 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (kex) ecdh-sha2-nistp521 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] available since OpenSSH 4.4 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] OpenSSH's GEX fallback mechanism was triggered during testing. Very old SSH clients will still be able to create connections using a 2048-bit modulus, though modern clients will use 3072. This can only be disabled by recompiling the code (see https://github.com/openssh/openssh-portable/blob/V_9_4/dh.c#L477)= . (kex) diffie-hellman-group14-sha256 -- [warn] 2048-bit modulus only provides 112-bits of symmetric strength (kex) diffie-hellman-group14-sha256 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3 # host-key algorithms (key) rsa-sha2-512 (4096-bit) -- [info] available since OpenSSH 7.2 (key) rsa-sha2-256 (4096-bit) -- [info] available since OpenSSH 7.2 # encryption algorithms (ciphers) (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 (enc) aes256-cbc -- [warn] using weak cipher mod= e (enc) aes256-cbc -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) aes256-cbc -- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.47 (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 (enc) aes128-cbc -- [warn] using weak cipher mod= e (enc) aes128-cbc -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) aes128-cbc -- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.28 # message authentication code algorithms (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [fail] using broken SHA-1 hash algorithm (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) hmac-sha2-256 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha2-256 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56 (mac) hmac-sha1 -- [fail] using broken SHA-1 hash algorithm (mac) hmac-sha1 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha1 -- [info] available since OpenSSH 2.1.0, Dropbear SSH 0.28 (mac) hmac-sha2-512 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha2-512 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56 # fingerprints (fin) ssh-rsa: SHA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ (fin) ssh-rsa: MD5:2d:ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case # algorithm recommendations (for OpenSSH 8.0) (rec) -ecdh-sha2-nistp256 -- kex algorithm to remove (rec) -ecdh-sha2-nistp384 -- kex algorithm to remove (rec) -ecdh-sha2-nistp521 -- kex algorithm to remove (rec) -hmac-sha1 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove (rec) +aes192-ctr -- enc algorithm to append (rec) +curve25519-sha256 -- kex algorithm to append (rec) [email protected] -- kex algorithm to append (rec) +ssh-ed25519 -- key algorithm to append (rec) -aes128-cbc -- enc algorithm to remove (rec) -aes256-cbc -- enc algorithm to remove (rec) -diffie-hellman-group14-sha256 -- kex algorithm to remove (rec) -hmac-sha2-256 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove (rec) -hmac-sha2-512 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove # additional info (nfo) For hardening guides on common OSes, please see: < https://www.ssh-audit.com/hardening_guides.html> #update-crypto-policies --set FUTURE #update-crypto-policies --show FUTURE # I still see vulnerability while ./ssh-audit.py -vvv 192.168.0.108 # ./ssh-audit.py -vvv 192.168.0.108 # general (gen) banner: SSH-2.0-OpenSSH_8.0 (gen) software: OpenSSH 8.0 (gen) compatibility: OpenSSH 7.3+, Dropbear SSH 2016.73+ (gen) compression: enabled ([email protected]) # key exchange algorithms (kex) curve25519-sha256 -- [warn] unknown algorithm (kex) [email protected] -- [info] available since OpenSSH 6.5, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp256 -- [fail] using weak elliptic curves (kex) ecdh-sha2-nistp256 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp384 -- [fail] using weak elliptic curves (kex) ecdh-sha2-nistp384 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp521 -- [fail] using weak elliptic curves (kex) ecdh-sha2-nistp521 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) diffie-hellman-group-exchange-sha256 -- [warn] using custom size modulus (possibly weak) (kex) diffie-hellman-group-exchange-sha256 -- [info] available since OpenSSH 4.4 (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3 # host-key algorithms (key) rsa-sha2-512 -- [info] available since OpenSSH 7.2 (key) rsa-sha2-256 -- [info] available since OpenSSH 7.2 (key) ssh-ed25519 -- [info] available since OpenSSH 6.5 # encryption algorithms (ciphers) (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) [email protected] -- [info] available since OpenSSH 6.5 (enc) [email protected] -- [info] default cipher since OpenSSH 6.9. (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 # message authentication code algorithms (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) hmac-sha2-256 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha2-256 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56 (mac) [email protected] -- [warn] using encrypt-and-MAC mode (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) hmac-sha2-512 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha2-512 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56 # algorithm recommendations (for OpenSSH 8.0) (rec) -diffie-hellman-group-exchange-sha256 -- kex algorithm to remove (rec) -ecdh-sha2-nistp256 -- kex algorithm to remove (rec) -ecdh-sha2-nistp384 -- kex algorithm to remove (rec) -ecdh-sha2-nistp521 -- kex algorithm to remove (rec) +diffie-hellman-group14-sha256 -- kex algorithm to append (rec) +ssh-rsa -- key algorithm to append (rec) +aes128-ctr -- enc algorithm to append (rec) +aes192-ctr -- enc algorithm to append (rec) [email protected] -- enc algorithm to append (rec) -hmac-sha2-256 -- mac algorithm to remove (rec) -hmac-sha2-512 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove # #update-crypto-policies --set DEFAULT # update-crypto-policies --show DEFAULT # ./ssh-audit.py -vvv localhost Starting audit of localhost:22... # general (gen) banner: SSH-2.0-OpenSSH_8.0 (gen) software: OpenSSH 8.0 (gen) compatibility: OpenSSH 7.4+, Dropbear SSH 2018.76+ (gen) compression: enabled ([email protected]) # security (cve) CVE-2021-41617 -- (CVSSv2: 7.0) privilege escalation via supplemental groups (cve) CVE-2020-15778 -- (CVSSv2: 7.8) command injection via anomalous argument transfers (cve) CVE-2019-16905 -- (CVSSv2: 7.8) memory corruption and local code execution via pre-authentication integer overflow (cve) CVE-2016-20012 -- (CVSSv2: 5.3) enumerate usernames via challenge response # key exchange algorithms (kex) curve25519-sha256 -- [info] available since OpenSSH 7.4, Dropbear SSH 2018.76 (kex) curve25519-sha256 -- [info] default key exchange since OpenSSH 6.4 (kex) [email protected] -- [info] available since OpenSSH 6.4, Dropbear SSH 2013.62 (kex) [email protected] -- [info] default key exchange since OpenSSH 6.4 (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] available since OpenSSH 4.4 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] OpenSSH's GEX fallback mechanism was triggered during testing. Very old SSH clients will still be able to create connections using a 2048-bit modulus, though modern clients will use 3072. This can only be disabled by recompiling the code (see https://github.com/openssh/openssh-portable/blob/V_9_4/dh.c#L477)= . # host-key algorithms (key) rsa-sha2-512 (4096-bit) -- [info] available since OpenSSH 7.2 (key) rsa-sha2-256 (4096-bit) -- [info] available since OpenSSH 7.2 (key) ssh-ed25519 -- [info] available since OpenSSH 6.5 # encryption algorithms (ciphers) (enc) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) [email protected] -- [info] available since OpenSSH 6.5 (enc) [email protected] -- [info] default cipher since OpenSSH 6.9 (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 (enc) aes192-ctr -- [info] available since OpenSSH 3.7 (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 # message authentication code algorithms (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [info] available since OpenSSH 6.2 # fingerprints (fin) ssh-ed25519: SHA256:LF2lloHchhKq5Y0gZa9MFsK/wBVTd2sadVjFortIBy8 (fin) ssh-ed25519: MD5:67:c2:e6:8d:23:13:8a:54:1e:75:ff:66:4e:1e:8b:87 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case (fin) ssh-rsa: SHA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ (fin) ssh-rsa: MD5:2d:ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case # algorithm recommendations (for OpenSSH 8.0) (rec) [email protected] -- enc algorithm to remove # additional info (nfo) For hardening guides on common OSes, please see: < https://www.ssh-audit.com/hardening_guides.html> # # update-crypto-policies --set LEGACY Setting system policy to LEGACY Note: System-wide crypto policies are applied on application start-up. It is recommended to restart the system for the change of policies to fully take place. # update-crypto-policies --show LEGACY # ./ssh-audit.py -vvv localhost Starting audit of localhost:22... # general (gen) banner: SSH-2.0-OpenSSH_8.0 (gen) software: OpenSSH 8.0 (gen) compatibility: OpenSSH 7.4+ (some functionality from 6.6), Dropbear SSH 2018.76+ (gen) compression: enabled ([email protected]) # security (cve) CVE-2021-41617 -- (CVSSv2: 7.0) privilege escalation via supplemental groups (cve) CVE-2020-15778 -- (CVSSv2: 7.8) command injection via anomalous argument transfers (cve) CVE-2019-16905 -- (CVSSv2: 7.8) memory corruption and local code execution via pre-authentication integer overflow (cve) CVE-2016-20012 -- (CVSSv2: 5.3) enumerate usernames via challenge response # key exchange algorithms (kex) curve25519-sha256 -- [info] available since OpenSSH 7.4, Dropbear SSH 2018.76 (kex) curve25519-sha256 -- [info] default key exchange since OpenSSH 6.4 (kex) [email protected] -- [info] available since OpenSSH 6.4, Dropbear SSH 2013.62 (kex) [email protected] -- [info] default key exchange since OpenSSH 6.4 (kex) ecdh-sha2-nistp256 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (kex) ecdh-sha2-nistp256 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp384 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (kex) ecdh-sha2-nistp384 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) ecdh-sha2-nistp521 -- [fail] using elliptic curves that are suspected as being backdoored by the U.S. National Security Agency (kex) ecdh-sha2-nistp521 -- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] available since OpenSSH 4.4 (kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] OpenSSH's GEX fallback mechanism was triggered during testing. Very old SSH clients will still be able to create connections using a 2048-bit modulus, though modern clients will use 3072. This can only be disabled by recompiling the code (see https://github.com/openssh/openssh-portable/blob/V_9_4/dh.c#L477)= . (kex) diffie-hellman-group14-sha256 -- [warn] 2048-bit modulus only provides 112-bits of symmetric strength (kex) diffie-hellman-group14-sha256 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73 (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3 (kex) diffie-hellman-group-exchange-sha1 (3072-bit) -- [fail] using broken SHA-1 hash algorithm (kex) diffie-hellman-group-exchange-sha1 (3072-bit) -- [info] available since OpenSSH 2.3.0 (kex) diffie-hellman-group-exchange-sha1 (3072-bit) -- [info] OpenSSH's GEX fallback mechanism was triggered during testing. Very old SSH clients will still be able to create connections using a 2048-bit modulus, though modern clients will use 3072. This can only be disabled by recompiling the code (see https://github.com/openssh/openssh-portable/blob/V_9_4/dh.c#L477). (kex) diffie-hellman-group14-sha1 -- [fail] using broken SHA-1 hash algorithm (kex) diffie-hellman-group14-sha1 -- [warn] 2048-bit modulus only provides 112-bits of symmetric strength (kex) diffie-hellman-group14-sha1 -- [info] available since OpenSSH 3.9, Dropbear SSH 0.53 # host-key algorithms (key) rsa-sha2-512 (4096-bit) -- [info] available since OpenSSH 7.2 (key) rsa-sha2-256 (4096-bit) -- [info] available since OpenSSH 7.2 (key) ssh-rsa (4096-bit) -- [fail] using broken SHA-1 hash algorithm (key) ssh-rsa (4096-bit) -- [info] available since OpenSSH 2.5.0, Dropbear SSH 0.28 (key) ssh-rsa (4096-bit) -- [info] deprecated in OpenSSH 8.8: https://www.openssh.com/txt/release-8.8 (key) ssh-ed25519 -- [info] available since OpenSSH 6.5 # encryption algorithms (ciphers) (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) [email protected] -- [info] available since OpenSSH 6.5 (enc) [email protected] -- [info] default cipher since OpenSSH 6.9 (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 (enc) aes256-cbc -- [warn] using weak cipher mod= e (enc) aes256-cbc -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) aes256-cbc -- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.47 (enc) [email protected] -- [info] available since OpenSSH 6.2 (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52 (enc) aes128-cbc -- [warn] using weak cipher mod= e (enc) aes128-cbc -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) aes128-cbc -- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.28 (enc) 3des-cbc -- [fail] using broken & deprecated 3DES cipher (enc) 3des-cbc -- [warn] using weak cipher mod= e (enc) 3des-cbc -- [warn] using small 64-bit block size (enc) 3des-cbc -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (enc) 3des-cbc -- [info] available since OpenSSH 1.2.2, Dropbear SSH 0.28 # message authentication code algorithms (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [fail] using broken SHA-1 hash algorithm (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) [email protected] -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix truncation (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) hmac-sha2-256 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha2-256 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56 (mac) hmac-sha1 -- [fail] using broken SHA-1 hash algorithm (mac) hmac-sha1 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha1 -- [info] available since OpenSSH 2.1.0, Dropbear SSH 0.28 (mac) [email protected] -- [warn] using encrypt-and-MAC mode (mac) [email protected] -- [info] available since OpenSSH 6.2 (mac) hmac-sha2-512 -- [warn] using encrypt-and-MAC mode (mac) hmac-sha2-512 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56 # fingerprints (fin) ssh-ed25519: SHA256:LF2lloHchhKq5Y0gZa9MFsK/wBVTd2sadVjFortIBy8 (fin) ssh-ed25519: MD5:67:c2:e6:8d:23:13:8a:54:1e:75:ff:66:4e:1e:8b:87 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case (fin) ssh-rsa: SHA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ (fin) ssh-rsa: MD5:2d:ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely on MD5 fingerprints for server identification; it is insecure for this use case # algorithm recommendations (for OpenSSH 8.0) (rec) -3des-cbc -- enc algorithm to remove (rec) -diffie-hellman-group-exchange-sha1 -- kex algorithm to remove (rec) -diffie-hellman-group14-sha1 -- kex algorithm to remove (rec) -ecdh-sha2-nistp256 -- kex algorithm to remove (rec) -ecdh-sha2-nistp384 -- kex algorithm to remove (rec) -ecdh-sha2-nistp521 -- kex algorithm to remove (rec) -hmac-sha1 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove (rec) -ssh-rsa -- key algorithm to remove (rec) +aes192-ctr -- enc algorithm to append (rec) -aes128-cbc -- enc algorithm to remove (rec) -aes256-cbc -- enc algorithm to remove (rec) [email protected] -- enc algorithm to remove (rec) -diffie-hellman-group14-sha256 -- kex algorithm to remove (rec) -hmac-sha2-256 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove (rec) -hmac-sha2-512 -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove (rec) [email protected] -- mac algorithm to remove # additional info (nfo) For hardening guides on common OSes, please see: < https://www.ssh-audit.com/hardening_guides.html> # # rpm -qa |grep openssh openssh-clients-8.0p1-19.el8_8.x86_64 openssh-8.0p1-19.el8_8.x86_64 openssh-server-8.0p1-19.el8_8.x86_64 openssh-askpass-8.0p1-19.el8_8.x86_64 # cat /etc/redhat-release Red Hat Enterprise Linux release 8.9 (Ootpa) # I have attached the sshd_config file for your reference. Please suggest further. Thanks in advance Best Regards, Kaushal --=20 You received this message because you are subscribed to the Google Groups "= [email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to [email protected]. --0000000000006dcaf2060fef0cdb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">= <div dir=3D"ltr" class=3D"gmail_attr">On Thu, Jan 25, 2024 at 7:53=E2=80=AF= PM Mike Burger <<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>> wrote:<br></div><blockquote class= =3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg= b(204,204,204);padding-left:1ex"><div style=3D"font-size:10pt;font-family:V= erdana,Geneva,sans-serif"> <p id=3D"m_-3331349534528307159m_3998468122509625586reply-intro">Hello, Kau= shal.</p> <p>The first item in <a href=3D"https://www.google.com/search?q=3DManage+ss= h+ciphers+in+rhel+8&oq=3DManage+ssh+ciphers+in+rhel+8" target=3D"_blank= ">this Google search</a> is <a href=3D"https://www.redhat.com/en/blog/confi= guring-rhel-8-compliance-crypto-policy-related-cipher-block-chaining" targe= t=3D"_blank">Red Hat's blog entry</a> on the matter.</p> <p>On 2024-01-25 08:10, Kaushal Shriyan wrote:</p> <blockquote type=3D"cite" style=3D"padding:0px 0.4em;border-left:2px solid = rgb(16,16,255);margin:0px"> <div id=3D"m_-3331349534528307159m_3998468122509625586replybody1"> <div dir=3D"ltr"> <div>Hi,</div> <div>=C2=A0</div> <div>I am running the below servers on=C2=A0Red Hat Enterprise Linux releas= e 8.7 (Ootpa). The details are as follows.=C2=A0</div> <div>=C2=A0</div> <div># rpm -qa | grep openssh<br>openssh-8.0p1-16.el8.x86_64<br>openssh-ask= pass-8.0p1-16.el8.x86_64<br>openssh-server-8.0p1-16.el8.x86_64<br>openssh-c= lients-8.0p1-16.el8.x86_64<br><br></div> <div># cat /etc/redhat-release<br>Red Hat Enterprise Linux release 8.7 (Oot= pa)<br>#</div> <div>=C2=A0</div> <div>How=C2=A0do I enable strong KexAlgorithms, Ciphers and=C2=A0MACs in /e= tc/ssh/sshd_config file as per the above ssh server version. For example as= per below setting.=C2=A0</div> <div>=C2=A0</div> <div>KexAlgorithms ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256= ,diffie-hellman-group-exchange-sha256<br>Ciphers=C2=A0<a href=3D"mailto:cha= [email protected]" rel=3D"noreferrer" target=3D"_blank">chacha20-p= [email protected]</a>,<a href=3D"mailto:[email protected]" rel=3D"no= referrer" target=3D"_blank">[email protected]</a>,<a href=3D"mailto:ae= [email protected]" rel=3D"noreferrer" target=3D"_blank">aes128-gcm@opens= sh.com</a>,aes256-ctr,aes192-ctr,aes128-ctr<br>MACs=C2=A0<a href=3D"mailto:= [email protected]" rel=3D"noreferrer" target=3D"_blank">hmac-sh= [email protected]</a>,<a href=3D"mailto:[email protected]"= rel=3D"noreferrer" target=3D"_blank">[email protected]</a>,<a = href=3D"mailto:[email protected]" rel=3D"noreferrer" target=3D"_blan= k">[email protected]</a>,hmac-sha2-512,hmac-sha2-256,<a href=3D"mail= to:[email protected]" rel=3D"noreferrer" target=3D"_blank">umac-128@open= ssh.com</a></div> <div>=C2=A0</div> <div> <div>Please guide me.</div> <div>=C2=A0</div> <div>Thanks in advance.</div> <div>=C2=A0</div> <div>Best Regards,</div> <div>=C2=A0</div> <div>Kaushal</div> </div> </div> <p><br></p> -- <br>You received this message because you are subscribed to the Google G= roups "<a href=3D"mailto:[email protected]" target=3D"_blank">red= [email protected]</a>" group.<br>To unsubscribe from this group and = stop receiving emails from it, send an email to <a href=3D"mailto:redhat-li= [email protected]" rel=3D"noreferrer" target=3D"_blank">redhat-list= [email protected]</a>.</div> </blockquote> <p><br></p> <div id=3D"m_-3331349534528307159m_3998468122509625586signature"> <div style=3D"margin:0px;padding:0px;font-family:monospace"><span>--=C2=A0<= br><a href=3D"https://poplme.co/hash/lqQkxj0F/1/es" target=3D"_blank"><img = id=3D"m_-3331349534528307159m_3998468122509625586email-sig-image" src=3D"ht= tps://firebasestorage.googleapis.com/v0/b/poplco.appspot.com/o/signatures%2= FYDJ6YD99-signature.png?alt=3Dmedia" width=3D"411" height=3D"273"></a><br><= br>"It's always suicide-mission this, save-the-planet that. No one= ever just stops by to say 'hi' anymore." --Colonel Jack O'= ;Neill, SG1</span></div> <p><br></p></div></div></blockquote><div><br></div><div>Hi,=C2=A0</div><div= ><br></div><div>I have followed=C2=A0<a href=3D"https://access.redhat.com/d= ocumentation/de-de/red_hat_enterprise_linux/8/html/security_hardening/using= -the-system-wide-cryptographic-policies_security-hardening" target=3D"_blan= k">https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/8= /html/security_hardening/using-the-system-wide-cryptographic-policies_secur= ity-hardening</a> by setting the crypto policies as per below and used=C2= =A0<a href=3D"https://github.com/jtesta/ssh-audit" target=3D"_blank">https:= //github.com/jtesta/ssh-audit</a> for scanning the vulnerability.=C2=A0</di= v><div><br></div><div>Starting audit of 192.168.0.108:22...<br># general<br= >(gen) banner: SSH-2.0-OpenSSH_8.0<br>(gen) software: OpenSSH 8.0<br>(gen) = compatibility: OpenSSH 7.4+, Dropbear SSH 2018.76+<br>(gen) compression: en= abled (<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]= om</a>)<br><br># security<br>(cve) CVE-2021-41617 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 7.0)= privilege escalation via supplemental groups<br>(cve) CVE-2020-15778 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0-- (CVSSv2: 7.8) command injection via anomalous argument transfers<b= r>(cve) CVE-2019-16905 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 7.8) memory corruption and local= code execution via pre-authentication integer overflow<br>(cve) CVE-2016-2= 0012 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0-- (CVSSv2: 5.3) enumerate usernames via challenge response<br= ><br># key exchange algorithms<br>(kex) curve25519-sha256 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available si= nce OpenSSH 7.4, Dropbear SSH 2018.76<br>(kex) curve25519-sha256 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] defau= lt key exchange since OpenSSH 6.4<br>(kex) <a href=3D"mailto:curve25519-sha= [email protected]" target=3D"_blank">[email protected]</a> =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.4, Dropbear = SSH 2013.62<br>(kex) <a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0-- [info] default key exchange since OpenSSH 6.4<br>(kex) diffie-hell= man-group16-sha512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since Op= enSSH 7.3, Dropbear SSH 2016.73<br>(kex) diffie-hellman-group18-sha512 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7.3<br>(kex) dif= fie-hellman-group-exchange-sha256 (3072-bit) -- [info] available since Open= SSH 4.4<br>(kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] = OpenSSH's GEX fallback mechanism was triggered during testing. Very old= SSH clients will still be able to create connections using a 2048-bit modu= lus, though modern clients will use 3072. This can only be disabled by reco= mpiling the code (see <a href=3D"https://github.com/openssh/openssh-portabl= e/blob/V_9_4/dh.c#L477" target=3D"_blank">https://github.com/openssh/openss= h-portable/blob/V_9_4/dh.c#L477</a>).<br><br># host-key algorithms<br>(key)= rsa-sha2-512 (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -= - [info] available since OpenSSH 7.2<br>(key) rsa-sha2-256 (4096-bit) =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since Ope= nSSH 7.2<br>(key) ssh-ed25519 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since Ope= nSSH 6.5<br><br># encryption algorithms (ciphers)<br>(enc) <a href=3D"mailt= o:[email protected]" target=3D"_blank">chacha20-poly1305@openss= h.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] vulnerable to the Terrapin = attack (CVE-2023-48795), allowing message prefix truncation<br>(enc) <a hre= f=3D"mailto:[email protected]" target=3D"_blank">chacha20-poly1= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since O= penSSH 6.5<br>(enc) <a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -= - [info] default cipher since OpenSSH 6.9<br>(enc) <a href=3D"mailto:aes256= [email protected]" target=3D"_blank">[email protected]</a> =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since Open= SSH 6.2<br>(enc) <a href=3D"mailto:[email protected]" target=3D"_blank= ">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0-- [info] available since OpenSSH 6.2<br>(enc) aes256-ctr =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 3.7, Dropbear SSH 0.52<b= r>(enc) aes192-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH = 3.7<br>(enc) aes128-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since O= penSSH 3.7, Dropbear SSH 0.52<br><br># message authentication code algorith= ms<br>(mac) <a href=3D"mailto:[email protected]" target=3D"_bla= nk">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info]= available since OpenSSH 6.2<br>(mac) <a href=3D"mailto:hmac-sha2-512-etm@o= penssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.2<br>(mac) <a href=3D= "mailto:[email protected]" target=3D"_blank">[email protected]= m</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available s= ince OpenSSH 6.2<br><br># fingerprints<br>(fin) ssh-ed25519: SHA256:LF2lloH= chhKq5Y0gZa9MFsK/wBVTd2sadVjFortIBy8<br>(fin) ssh-ed25519: MD5:67:c2:e6:8d:= 23:13:8a:54:1e:75:ff:66:4e:1e:8b:87 -- [info] do not rely on MD5 fingerprin= ts for server identification; it is insecure for this use case<br>(fin) ssh= -rsa: SHA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ<br>(fin) ssh-rsa: = MD5:2d:ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely o= n MD5 fingerprints for server identification; it is insecure for this use c= ase<br><br># algorithm recommendations (for OpenSSH 8.0)<br>(rec) -<a href= =3D"mailto:[email protected]" target=3D"_blank">chacha20-poly13= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0-- enc algorithm to remove<br= ><br># additional info<br>(nfo) For hardening guides on common OSes, please= see: <<a href=3D"https://www.ssh-audit.com/hardening_guides.html" targe= t=3D"_blank">https://www.ssh-audit.com/hardening_guides.html</a>><br></d= iv><div><br></div><div>#update-crypto-policies --set FIPS</div><div># updat= e-crypto-policies --show<br>FIPS<br>#./ssh-audit.py -vvv localhost</div><di= v>Starting audit of localhost:22...<br># general<br>(gen) banner: SSH-2.0-O= penSSH_8.0<br>(gen) software: OpenSSH 8.0<br>(gen) compatibility: OpenSSH 7= .3+ (some functionality from 6.6), Dropbear SSH 2016.73+<br>(gen) compressi= on: enabled (<a href=3D"mailto:[email protected]" target=3D"_blank">zlib@ope= nssh.com</a>)<br><br># security<br>(cve) CVE-2021-41617 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv= 2: 7.0) privilege escalation via supplemental groups<br>(cve) CVE-2020-1577= 8 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0-- (CVSSv2: 7.8) command injection via anomalous argument transfe= rs<br>(cve) CVE-2019-16905 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 7.8) memory corruption and l= ocal code execution via pre-authentication integer overflow<br>(cve) CVE-20= 16-20012 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- (CVSSv2: 5.3) enumerate usernames via challenge respons= e<br><br># key exchange algorithms<br>(kex) ecdh-sha2-nistp256 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using = elliptic curves that are suspected as being backdoored by the U.S. National= Security Agency<br>(kex) ecdh-sha2-nistp256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH = 5.7, Dropbear SSH 2013.62<br>(kex) ecdh-sha2-nistp384 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using elliptic cu= rves that are suspected as being backdoored by the U.S. National Security A= gency<br>(kex) ecdh-sha2-nistp384 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 5.7, Dropbear= SSH 2013.62<br>(kex) ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using elliptic curves that are= suspected as being backdoored by the U.S. National Security Agency<br>(kex= ) ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 5.7, Dropbear SSH 2013.6= 2<br>(kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] availa= ble since OpenSSH 4.4<br>(kex) diffie-hellman-group-exchange-sha256 (3072-b= it) -- [info] OpenSSH's GEX fallback mechanism was triggered during tes= ting. Very old SSH clients will still be able to create connections using a= 2048-bit modulus, though modern clients will use 3072. This can only be di= sabled by recompiling the code (see <a href=3D"https://github.com/openssh/o= penssh-portable/blob/V_9_4/dh.c#L477" target=3D"_blank">https://github.com/= openssh/openssh-portable/blob/V_9_4/dh.c#L477</a>).<br>(kex) diffie-hellman= -group14-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] 2048-bit modulus only= provides 112-bits of symmetric strength<br>(kex) diffie-hellman-group14-sh= a256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7.3, Dro= pbear SSH 2016.73<br>(kex) diffie-hellman-group16-sha512 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73<br>(= kex) diffie-hellman-group18-sha512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] av= ailable since OpenSSH 7.3<br><br># host-key algorithms<br>(key) rsa-sha2-51= 2 (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] ava= ilable since OpenSSH 7.2<br>(key) rsa-sha2-256 (4096-bit) =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7.2<br><b= r># encryption algorithms (ciphers)<br>(enc) <a href=3D"mailto:aes256-gcm@o= penssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.2= <br>(enc) aes256-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since Open= SSH 3.7, Dropbear SSH 0.52<br>(enc) aes256-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [wa= rn] using weak cipher mode<br>(enc) aes256-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [wa= rn] vulnerable to the Terrapin attack (CVE-2023-48795), allowing message pr= efix truncation<br>(enc) aes256-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] availa= ble since OpenSSH 2.3.0, Dropbear SSH 0.47<br>(enc) <a href=3D"mailto:aes12= [email protected]" target=3D"_blank">[email protected]</a> =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since Open= SSH 6.2<br>(enc) aes128-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available sin= ce OpenSSH 3.7, Dropbear SSH 0.52<br>(enc) aes128-cbc =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0-- [warn] using weak cipher mode<br>(enc) aes128-cbc =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0-- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowin= g message prefix truncation<br>(enc) aes128-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [i= nfo] available since OpenSSH 2.3.0, Dropbear SSH 0.28<br><br># message auth= entication code algorithms<br>(mac) <a href=3D"mailto:hmac-sha2-256-etm@ope= nssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0= =C2=A0 =C2=A0 -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795)= , allowing message prefix truncation<br>(mac) <a href=3D"mailto:hmac-sha2-2= [email protected]" target=3D"_blank">[email protected]</a> =C2= =A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.2<br>(mac) <a = href=3D"mailto:[email protected]" target=3D"_blank">hmac-sha1-etm@o= penssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [fail] using br= oken SHA-1 hash algorithm<br>(mac) <a href=3D"mailto:hmac-sha1-etm@openssh.= com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 -- [warn] vulnerable to the Terrapin attack (CVE-2023-= 48795), allowing message prefix truncation<br>(mac) <a href=3D"mailto:hmac-= [email protected]" target=3D"_blank">[email protected]</a> =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.= 2<br>(mac) <a href=3D"mailto:[email protected]" target=3D"_blan= k">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] = vulnerable to the Terrapin attack (CVE-2023-48795), allowing message prefix= truncation<br>(mac) <a href=3D"mailto:[email protected]" targe= t=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 = -- [info] available since OpenSSH 6.2<br>(mac) hmac-sha2-256 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [w= arn] using encrypt-and-MAC mode<br>(mac) hmac-sha2-256 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] a= vailable since OpenSSH 5.9, Dropbear SSH 2013.56<br>(mac) hmac-sha1 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- [fail] using broken SHA-1 hash algorithm<br>(mac) hmac= -sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] using encrypt-and-MAC mode<br>(mac) = hmac-sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 2.1.0,= Dropbear SSH 0.28<br>(mac) hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] using encryp= t-and-MAC mode<br>(mac) hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since = OpenSSH 5.9, Dropbear SSH 2013.56<br><br># fingerprints<br>(fin) ssh-rsa: S= HA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ<br>(fin) ssh-rsa: MD5:2d:= ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely on MD5 f= ingerprints for server identification; it is insecure for this use case<br>= <br># algorithm recommendations (for OpenSSH 8.0)<br>(rec) -ecdh-sha2-nistp= 256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- kex a= lgorithm to remove<br>(rec) -ecdh-sha2-nistp384 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- kex algorithm to remove<br>(rec) -ec= dh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 -- kex algorithm to remove<br>(rec) -hmac-sha1 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0-- mac algorithm to remove<br>(rec) -<a href=3D"mailto:hmac-sha1-etm@ope= nssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) +aes192-ctr =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 -- enc algorithm to append<br>(rec) +curve25519-sha256 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- kex algor= ithm to append<br>(rec) +<a href=3D"mailto:[email protected]" ta= rget=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2= =A0 -- kex algorithm to append<br>(rec) +ssh-ed25519 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- key= algorithm to append<br>(rec) -aes128-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- enc algorith= m to remove<br>(rec) -aes256-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- enc algorithm to remove= <br>(rec) -diffie-hellman-group14-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- kex = algorithm to remove<br>(rec) -hmac-sha2-256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to rem= ove<br>(rec) -<a href=3D"mailto:[email protected]" target=3D"_b= lank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac a= lgorithm to remove<br>(rec) -hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to rem= ove<br>(rec) -<a href=3D"mailto:[email protected]" target=3D"_b= lank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac a= lgorithm to remove<br><br># additional info<br>(nfo) For hardening guides o= n common OSes, please see: <<a href=3D"https://www.ssh-audit.com/hardeni= ng_guides.html" target=3D"_blank">https://www.ssh-audit.com/hardening_guide= s.html</a>><br><br></div><div><br></div><div>#update-crypto-policies --s= et=C2=A0FUTURE</div><div>#update-crypto-policies --show<br>FUTURE<br>#<br><= /div><div>I still see vulnerability while=C2=A0./ssh-audit.py -vvv 192.168.= 0.108<br></div><div><br></div><div># ./ssh-audit.py -vvv 192.168.0.108<br>#= general<br>(gen) banner: SSH-2.0-OpenSSH_8.0<br>(gen) software: OpenSSH 8.= 0<br>(gen) compatibility: OpenSSH 7.3+, Dropbear SSH 2016.73+<br>(gen) comp= ression: enabled (<a href=3D"mailto:[email protected]" target=3D"_blank">zli= [email protected]</a>)<br><br># key exchange algorithms<br>(kex) curve25519-sha= 256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -= - [warn] unknown algorithm<br>(kex) <a href=3D"mailto:curve25519-sha256@lib= ssh.org" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.5, Dropbear SSH 201= 3.62<br>(kex) ecdh-sha2-nistp256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using weak elliptic curves<br>(kex) ec= dh-sha2-nistp256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0-- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62<br= >(kex) ecdh-sha2-nistp384 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0-- [fail] using weak elliptic curves<br>(kex) ecdh-sha2= -nistp384 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0-- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62<br>(kex) = ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0-- [fail] using weak elliptic curves<br>(kex) ecdh-sha2-nistp5= 21 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- = [info] available since OpenSSH 5.7, Dropbear SSH 2013.62<br>(kex) diffie-he= llman-group-exchange-sha256 =C2=A0-- [warn] using custom size modulus (poss= ibly weak)<br>(kex) diffie-hellman-group-exchange-sha256 =C2=A0-- [info] av= ailable since OpenSSH 4.4<br>(kex) diffie-hellman-group16-sha512 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.= 73<br>(kex) diffie-hellman-group18-sha512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [i= nfo] available since OpenSSH 7.3<br><br># host-key algorithms<br>(key) rsa-= sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 7.2<br>(key) rsa-= sha2-256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 7.2<br>(key) ssh-= ed25519 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.5<br><br># enc= ryption algorithms (ciphers)<br>(enc) <a href=3D"mailto:aes256-gcm@openssh.= com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.2<br>(en= c) <a href=3D"mailto:[email protected]" target=3D"_blank">chach= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] availabl= e since OpenSSH 6.5<br>(enc) <a href=3D"mailto:[email protected]= m" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0= =C2=A0 -- [info] default cipher since OpenSSH 6.9.<br>(enc) aes256-ctr =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 3.7, Dropbear SSH 0.5= 2<br><br># message authentication code algorithms<br>(mac) <a href=3D"mailt= o:[email protected]" target=3D"_blank">hmac-sha2-256-etm@openss= h.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.2= <br>(mac) <a href=3D"mailto:[email protected]" target=3D"_blank">uma= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-= - [info] available since OpenSSH 6.2<br>(mac) <a href=3D"mailto:hmac-sha2-5= [email protected]" target=3D"_blank">[email protected]</a> =C2= =A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.2<br>(mac) hma= c-sha2-256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 -- [warn] using encrypt-and-MAC mode<br>(mac) hmac-sha= 2-256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56<= br>(mac) <a href=3D"mailto:[email protected]" target=3D"_blank">umac-128= @openssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0-- [warn] using encrypt-and-MAC mode<br>(mac) <a href=3D"mailto:umac-= [email protected]" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since O= penSSH 6.2<br>(mac) hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] using encrypt-and-MAC = mode<br>(mac) hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 5.= 9, Dropbear SSH 2013.56<br><br># algorithm recommendations (for OpenSSH 8.0= )<br>(rec) -diffie-hellman-group-exchange-sha256 -- kex algorithm to remove= <br>(rec) -ecdh-sha2-nistp256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- kex algorithm to remove<br>(rec) -ecdh-sha2-nistp384 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- kex algor= ithm to remove<br>(rec) -ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- kex algorithm to remove<br>(rec) +diffie= -hellman-group14-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- kex algorithm to appe= nd<br>(rec) +ssh-rsa =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- key algorithm to app= end<br>(rec) +aes128-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- enc algorithm to append<br>(re= c) +aes192-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- enc algorithm to append<br>(rec) +<a hre= f=3D"mailto:[email protected]" target=3D"_blank">[email protected]= m</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- enc algorithm to = append<br>(rec) -hmac-sha2-256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec= ) -hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) -<a href=3D"= mailto:[email protected]" target=3D"_blank">[email protected]</a> =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- mac algorithm to re= move<br><br>#<br></div><div><br></div><div><br></div><div>#update-crypto-po= licies --set DEFAULT<br></div><div># update-crypto-policies --show<br>DEFAU= LT<br># ./ssh-audit.py -vvv localhost<br>Starting audit of localhost:22...<= br># general<br>(gen) banner: SSH-2.0-OpenSSH_8.0<br>(gen) software: OpenSS= H 8.0<br>(gen) compatibility: OpenSSH 7.4+, Dropbear SSH 2018.76+<br>(gen) = compression: enabled (<a href=3D"mailto:[email protected]" target=3D"_blank"= >[email protected]</a>)<br><br># security<br>(cve) CVE-2021-41617 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0--= (CVSSv2: 7.0) privilege escalation via supplemental groups<br>(cve) CVE-20= 20-15778 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- (CVSSv2: 7.8) command injection via anomalous argument = transfers<br>(cve) CVE-2019-16905 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 7.8) memory corruptio= n and local code execution via pre-authentication integer overflow<br>(cve)= CVE-2016-20012 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 5.3) enumerate usernames via challenge = response<br><br># key exchange algorithms<br>(kex) curve25519-sha256 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] a= vailable since OpenSSH 7.4, Dropbear SSH 2018.76<br>(kex) curve25519-sha256= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [= info] default key exchange since OpenSSH 6.4<br>(kex) <a href=3D"mailto:cur= [email protected]" target=3D"_blank">[email protected]</= a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.4,= Dropbear SSH 2013.62<br>(kex) <a href=3D"mailto:[email protected]= rg" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0-- [info] default key exchange since OpenSSH 6.4<br>(kex) dif= fie-hellman-group16-sha512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available = since OpenSSH 7.3, Dropbear SSH 2016.73<br>(kex) diffie-hellman-group18-sha= 512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7.3<br>(k= ex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info] available sin= ce OpenSSH 4.4<br>(kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- = [info] OpenSSH's GEX fallback mechanism was triggered during testing. V= ery old SSH clients will still be able to create connections using a 2048-b= it modulus, though modern clients will use 3072. This can only be disabled = by recompiling the code (see <a href=3D"https://github.com/openssh/openssh-= portable/blob/V_9_4/dh.c#L477" target=3D"_blank">https://github.com/openssh= /openssh-portable/blob/V_9_4/dh.c#L477</a>).<br><br># host-key algorithms<b= r>(key) rsa-sha2-512 (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 -- [info] available since OpenSSH 7.2<br>(key) rsa-sha2-256 (4096-bi= t) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available sin= ce OpenSSH 7.2<br>(key) ssh-ed25519 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available si= nce OpenSSH 6.5<br><br># encryption algorithms (ciphers)<br>(enc) <a href= =3D"mailto:[email protected]" target=3D"_blank">chacha20-poly13= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] vulnerable to the = Terrapin attack (CVE-2023-48795), allowing message prefix truncation<br>(en= c) <a href=3D"mailto:[email protected]" target=3D"_blank">chach= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] availabl= e since OpenSSH 6.5<br>(enc) <a href=3D"mailto:[email protected]= m" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0= =C2=A0 -- [info] default cipher since OpenSSH 6.9<br>(enc) <a href=3D"mail= to:[email protected]" target=3D"_blank">[email protected]</a> =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available sin= ce OpenSSH 6.2<br>(enc) <a href=3D"mailto:[email protected]" target=3D= "_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.2<br>(enc) aes256-ctr = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 3.7, Dropbear SSH= 0.52<br>(enc) aes192-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since O= penSSH 3.7<br>(enc) aes128-ctr =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available = since OpenSSH 3.7, Dropbear SSH 0.52<br><br># message authentication code a= lgorithms<br>(mac) <a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -= - [info] available since OpenSSH 6.2<br>(mac) <a href=3D"mailto:hmac-sha2-5= [email protected]" target=3D"_blank">[email protected]</a> =C2= =A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.2<br>(mac) <a = href=3D"mailto:[email protected]" target=3D"_blank">umac-128-etm@ope= nssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] avai= lable since OpenSSH 6.2<br><br># fingerprints<br>(fin) ssh-ed25519: SHA256:= LF2lloHchhKq5Y0gZa9MFsK/wBVTd2sadVjFortIBy8<br>(fin) ssh-ed25519: MD5:67:c2= :e6:8d:23:13:8a:54:1e:75:ff:66:4e:1e:8b:87 -- [info] do not rely on MD5 fin= gerprints for server identification; it is insecure for this use case<br>(f= in) ssh-rsa: SHA256:nTCMABhBfu68qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ<br>(fin) ss= h-rsa: MD5:2d:ab:3a:4f:8e:dc:69:69:96:11:86:56:ce:a6:1a:c1 -- [info] do not= rely on MD5 fingerprints for server identification; it is insecure for thi= s use case<br><br># algorithm recommendations (for OpenSSH 8.0)<br>(rec) -<= a href=3D"mailto:[email protected]" target=3D"_blank">chacha20-= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0-- enc algorithm to rem= ove<br><br># additional info<br>(nfo) For hardening guides on common OSes, = please see: <<a href=3D"https://www.ssh-audit.com/hardening_guides.html"= target=3D"_blank">https://www.ssh-audit.com/hardening_guides.html</a>><= br><br>#<br></div><div><br></div><div># update-crypto-policies --set LEGACY= <br>Setting system policy to LEGACY<br>Note: System-wide crypto policies ar= e applied on application start-up.<br>It is recommended to restart the syst= em for the change of policies<br>to fully take place.<br># update-crypto-po= licies --show<br>LEGACY<br># ./ssh-audit.py -vvv localhost<br>Starting audi= t of localhost:22...<br># general<br>(gen) banner: SSH-2.0-OpenSSH_8.0<br>(= gen) software: OpenSSH 8.0<br>(gen) compatibility: OpenSSH 7.4+ (some funct= ionality from 6.6), Dropbear SSH 2018.76+<br>(gen) compression: enabled (<a= href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a>)<b= r><br># security<br>(cve) CVE-2021-41617 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 7.0) privilege= escalation via supplemental groups<br>(cve) CVE-2020-15778 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- (CV= SSv2: 7.8) command injection via anomalous argument transfers<br>(cve) CVE-= 2019-16905 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0-- (CVSSv2: 7.8) memory corruption and local code execu= tion via pre-authentication integer overflow<br>(cve) CVE-2016-20012 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0-- (CVSSv2: 5.3) enumerate usernames via challenge response<br><br># key= exchange algorithms<br>(kex) curve25519-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSS= H 7.4, Dropbear SSH 2018.76<br>(kex) curve25519-sha256 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] default key exc= hange since OpenSSH 6.4<br>(kex) <a href=3D"mailto:curve25519-sha256@libssh= .org" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 6.4, Dropbear SSH 2013.6= 2<br>(kex) <a href=3D"mailto:[email protected]" target=3D"_blank= ">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [in= fo] default key exchange since OpenSSH 6.4<br>(kex) ecdh-sha2-nistp256 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail]= using elliptic curves that are suspected as being backdoored by the U.S. N= ational Security Agency<br>(kex) ecdh-sha2-nistp256 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since O= penSSH 5.7, Dropbear SSH 2013.62<br>(kex) ecdh-sha2-nistp384 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using elli= ptic curves that are suspected as being backdoored by the U.S. National Sec= urity Agency<br>(kex) ecdh-sha2-nistp384 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 5.7, D= ropbear SSH 2013.62<br>(kex) ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using elliptic curves t= hat are suspected as being backdoored by the U.S. National Security Agency<= br>(kex) ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 5.7, Dropbear SSH= 2013.62<br>(kex) diffie-hellman-group-exchange-sha256 (3072-bit) -- [info]= available since OpenSSH 4.4<br>(kex) diffie-hellman-group-exchange-sha256 = (3072-bit) -- [info] OpenSSH's GEX fallback mechanism was triggered dur= ing testing. Very old SSH clients will still be able to create connections = using a 2048-bit modulus, though modern clients will use 3072. This can onl= y be disabled by recompiling the code (see <a href=3D"https://github.com/op= enssh/openssh-portable/blob/V_9_4/dh.c#L477" target=3D"_blank">https://gith= ub.com/openssh/openssh-portable/blob/V_9_4/dh.c#L477</a>).<br>(kex) diffie-= hellman-group14-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] 2048-bit modul= us only provides 112-bits of symmetric strength<br>(kex) diffie-hellman-gro= up14-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7= .3, Dropbear SSH 2016.73<br>(kex) diffie-hellman-group16-sha512 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.= 73<br>(kex) diffie-hellman-group18-sha512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [i= nfo] available since OpenSSH 7.3<br>(kex) diffie-hellman-group-exchange-sha= 1 (3072-bit) -- [fail] using broken SHA-1 hash algorithm<br>(kex) diffie-he= llman-group-exchange-sha1 (3072-bit) -- [info] available since OpenSSH 2.3.= 0<br>(kex) diffie-hellman-group-exchange-sha1 (3072-bit) -- [info] OpenSSH&= #39;s GEX fallback mechanism was triggered during testing. Very old SSH cli= ents will still be able to create connections using a 2048-bit modulus, tho= ugh modern clients will use 3072. This can only be disabled by recompiling = the code (see <a href=3D"https://github.com/openssh/openssh-portable/blob/V= _9_4/dh.c#L477" target=3D"_blank">https://github.com/openssh/openssh-portab= le/blob/V_9_4/dh.c#L477</a>).<br>(kex) diffie-hellman-group14-sha1 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [fail] using broken SHA-1 hash algorithm<br>= (kex) diffie-hellman-group14-sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [wa= rn] 2048-bit modulus only provides 112-bits of symmetric strength<br>(kex) = diffie-hellman-group14-sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] av= ailable since OpenSSH 3.9, Dropbear SSH 0.53<br><br># host-key algorithms<b= r>(key) rsa-sha2-512 (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 -- [info] available since OpenSSH 7.2<br>(key) rsa-sha2-256 (4096-bi= t) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available sin= ce OpenSSH 7.2<br>(key) ssh-rsa (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] using broken SHA-1 hash alg= orithm<br>(key) ssh-rsa (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 2.5.0, Dro= pbear SSH 0.28<br>(key) ssh-rsa (4096-bit) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] deprecated in OpenSSH 8.8: = <a href=3D"https://www.openssh.com/txt/release-8.8" target=3D"_blank">https= ://www.openssh.com/txt/release-8.8</a><br>(key) ssh-ed25519 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 -- [info] available since OpenSSH 6.5<br><br># encryption algorithms (c= iphers)<br>(enc) <a href=3D"mailto:[email protected]" target=3D"_blank= ">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0-- [info] available since OpenSSH 6.2<br>(enc) <a href=3D"mailto:= [email protected]" target=3D"_blank">chacha20-poly1305@openssh.= com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] vulnerable to the Terrapin at= tack (CVE-2023-48795), allowing message prefix truncation<br>(enc) <a href= =3D"mailto:[email protected]" target=3D"_blank">chacha20-poly13= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available since Op= enSSH 6.5<br>(enc) <a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -= - [info] default cipher since OpenSSH 6.9<br>(enc) aes256-ctr =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0-- [info] available since OpenSSH 3.7, Dropbear SSH 0.52<br>(enc)= aes256-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] using weak cipher mode<br>(enc)= aes256-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] vulnerable to the Terrapin atta= ck (CVE-2023-48795), allowing message prefix truncation<br>(enc) aes256-cbc= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 2.3.0, Dropbear S= SH 0.47<br>(enc) <a href=3D"mailto:[email protected]" target=3D"_blank= ">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0-- [info] available since OpenSSH 6.2<br>(enc) aes128-ctr =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 3.7, Dropbear SSH 0.52<b= r>(enc) aes128-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] using weak cipher mode<b= r>(enc) aes128-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] vulnerable to the Terrap= in attack (CVE-2023-48795), allowing message prefix truncation<br>(enc) aes= 128-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 2.3.0, Dro= pbear SSH 0.28<br>(enc) 3des-cbc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [fail] usi= ng broken & deprecated 3DES cipher<br>(enc) 3des-cbc =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0-- [warn] using weak cipher mode<br>(enc) 3des-cbc =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0-- [warn] using small 64-bit block size<br>(enc) 3des-c= bc =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] vulnerable to the Terrapin atta= ck (CVE-2023-48795), allowing message prefix truncation<br>(enc) 3des-cbc = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available since OpenSSH 1.2.2, Dro= pbear SSH 0.28<br><br># message authentication code algorithms<br>(mac) <a = href=3D"mailto:[email protected]" target=3D"_blank">hmac-sha2-2= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] vulnerable to = the Terrapin attack (CVE-2023-48795), allowing message prefix truncation<br= >(mac) <a href=3D"mailto:[email protected]" target=3D"_blank">h= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] avai= lable since OpenSSH 6.2<br>(mac) <a href=3D"mailto:[email protected]= m" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- [fail] using broken SHA-1 hash algorithm<br>(mac) <a h= ref=3D"mailto:[email protected]" target=3D"_blank">hmac-sha1-etm@op= enssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] vulnerabl= e to the Terrapin attack (CVE-2023-48795), allowing message prefix truncati= on<br>(mac) <a href=3D"mailto:[email protected]" target=3D"_blank">= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- = [info] available since OpenSSH 6.2<br>(mac) <a href=3D"mailto:umac-128-etm@= openssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] vulnerable to the Terrapin atta= ck (CVE-2023-48795), allowing message prefix truncation<br>(mac) <a href=3D= "mailto:[email protected]" target=3D"_blank">[email protected]= m</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [info] available s= ince OpenSSH 6.2<br>(mac) <a href=3D"mailto:[email protected]" = target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 = =C2=A0 -- [warn] vulnerable to the Terrapin attack (CVE-2023-48795), allowi= ng message prefix truncation<br>(mac) <a href=3D"mailto:hmac-sha2-512-etm@o= penssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- [info] available since OpenSSH 6.2<br>(mac) hmac-sha2-= 256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 -- [warn] using encrypt-and-MAC mode<br>(mac) hmac-sha2-256 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56<br>(= mac) hmac-sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [fail] using broken SHA-1 hash al= gorithm<br>(mac) hmac-sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [warn] using encrypt-a= nd-MAC mode<br>(mac) hmac-sha1 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- [info] available= since OpenSSH 2.1.0, Dropbear SSH 0.28<br>(mac) <a href=3D"mailto:umac-128= @openssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- [warn] using encrypt-and-MA= C mode<br>(mac) <a href=3D"mailto:[email protected]" target=3D"_blank">u= [email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0-- [info] available since OpenSSH 6.2<br>(mac) hmac-sha2-512 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- [warn] using encrypt-and-MAC mode<br>(mac) hmac-sha2-512 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 -- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56<br><br>#= fingerprints<br>(fin) ssh-ed25519: SHA256:LF2lloHchhKq5Y0gZa9MFsK/wBVTd2sa= dVjFortIBy8<br>(fin) ssh-ed25519: MD5:67:c2:e6:8d:23:13:8a:54:1e:75:ff:66:4= e:1e:8b:87 -- [info] do not rely on MD5 fingerprints for server identificat= ion; it is insecure for this use case<br>(fin) ssh-rsa: SHA256:nTCMABhBfu68= qgS6PXAJHDFlahvVQB5LbMPx5hgWBZQ<br>(fin) ssh-rsa: MD5:2d:ab:3a:4f:8e:dc:69:= 69:96:11:86:56:ce:a6:1a:c1 -- [info] do not rely on MD5 fingerprints for se= rver identification; it is insecure for this use case<br><br># algorithm re= commendations (for OpenSSH 8.0)<br>(rec) -3des-cbc =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -= - enc algorithm to remove<br>(rec) -diffie-hellman-group-exchange-sha1 =C2= =A0 -- kex algorithm to remove<br>(rec) -diffie-hellman-group14-sha1 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0-- kex algorithm to remove<br>(rec) -ecdh-sha2-= nistp256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- = kex algorithm to remove<br>(rec) -ecdh-sha2-nistp384 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- kex algorithm to remove<br>(re= c) -ecdh-sha2-nistp521 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- kex algorithm to remove<br>(rec) -hmac-sha1 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0-- mac algorithm to remove<br>(rec) -<a href=3D"mailto:hmac-sha1-etm@= openssh.com" target=3D"_blank">[email protected]</a> =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) -ssh-rsa =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0-- key algorithm to remove<br>(rec) +aes192-ctr = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 -- enc algorithm to append<br>(rec) -aes128-cbc =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- enc algorithm to remove<br>(rec) -aes256-cbc =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 -- enc algorithm to remove<br>(rec) -<a href=3D"mailto:chacha20-poly130= [email protected]" target=3D"_blank">[email protected]</a> =C2=A0 = =C2=A0 =C2=A0 =C2=A0-- enc algorithm to remove<br>(rec) -diffie-hellman-gro= up14-sha256 =C2=A0 =C2=A0 =C2=A0 =C2=A0-- kex algorithm to remove<br>(rec) = -hmac-sha2-256 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) -<a href=3D"mai= lto:[email protected]" target=3D"_blank">hmac-sha2-256-etm@open= ssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) = -hmac-sha2-512 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) -<a href=3D"mai= lto:[email protected]" target=3D"_blank">hmac-sha2-512-etm@open= ssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0-- mac algorithm to remove<br>(rec) = -<a href=3D"mailto:[email protected]" target=3D"_blank">umac-128-etm= @openssh.com</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- mac algorithm= to remove<br>(rec) -<a href=3D"mailto:[email protected]" target=3D"_bla= nk">[email protected]</a> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 -- mac algorithm to remove<br><br># additional info<br>(nfo) For= hardening guides on common OSes, please see: <<a href=3D"https://www.ss= h-audit.com/hardening_guides.html" target=3D"_blank">https://www.ssh-audit.= com/hardening_guides.html</a>><br><br>#<br></div><div><br></div><div># r= pm -qa |grep openssh<br>openssh-clients-8.0p1-19.el8_8.x86_64<br>openssh-8.= 0p1-19.el8_8.x86_64<br>openssh-server-8.0p1-19.el8_8.x86_64<br>openssh-askp= ass-8.0p1-19.el8_8.x86_64<br># cat /etc/redhat-release<br>Red Hat Enterpris= e Linux release 8.9 (Ootpa)<br>#<br></div><div><br></div><div>I have attach= ed the sshd_config file for your reference. Please suggest further. Thanks = in advance</div><div><br></div><div>Best Regards,</div><div><br></div><div>= Kaushal=C2=A0</div></div></div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;[email protected]" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">redhat-list+u= [email protected]</a>.<br /> --0000000000006dcaf2060fef0cdb-- --0000000000006dcaf4060fef0cdd Content-Type: text/plain; charset="US-ASCII"; name="sshd_config.txt" Content-Disposition: attachment; filename="sshd_config.txt" Content-Transfer-Encoding: base64 Content-ID: <f_lrw86hlu0> X-Attachment-Id: f_lrw86hlu0 IwkkT3BlbkJTRDogc3NoZF9jb25maWcsdiAxLjEwMyAyMDE4LzA0LzA5IDIwOjQxOjIyIHRqIEV4 cCAkCgojIFRoaXMgaXMgdGhlIHNzaGQgc2VydmVyIHN5c3RlbS13aWRlIGNvbmZpZ3VyYXRpb24g ZmlsZS4gIFNlZQojIHNzaGRfY29uZmlnKDUpIGZvciBtb3JlIGluZm9ybWF0aW9uLgoKIyBUaGlz IHNzaGQgd2FzIGNvbXBpbGVkIHdpdGggUEFUSD0vdXNyL2xvY2FsL2JpbjovdXNyL2JpbjovdXNy L2xvY2FsL3NiaW46L3Vzci9zYmluCgojIFRoZSBzdHJhdGVneSB1c2VkIGZvciBvcHRpb25zIGlu IHRoZSBkZWZhdWx0IHNzaGRfY29uZmlnIHNoaXBwZWQgd2l0aAojIE9wZW5TU0ggaXMgdG8gc3Bl Y2lmeSBvcHRpb25zIHdpdGggdGhlaXIgZGVmYXVsdCB2YWx1ZSB3aGVyZQojIHBvc3NpYmxlLCBi dXQgbGVhdmUgdGhlbSBjb21tZW50ZWQuICBVbmNvbW1lbnRlZCBvcHRpb25zIG92ZXJyaWRlIHRo ZQojIGRlZmF1bHQgdmFsdWUuCgojIElmIHlvdSB3YW50IHRvIGNoYW5nZSB0aGUgcG9ydCBvbiBh IFNFTGludXggc3lzdGVtLCB5b3UgaGF2ZSB0byB0ZWxsCiMgU0VMaW51eCBhYm91dCB0aGlzIGNo YW5nZS4KIyBzZW1hbmFnZSBwb3J0IC1hIC10IHNzaF9wb3J0X3QgLXAgdGNwICNQT1JUTlVNQkVS CiMKI1BvcnQgOTQ0MwojQWRkcmVzc0ZhbWlseSBhbnkKI0xpc3RlbkFkZHJlc3MgMC4wLjAuMAoj TGlzdGVuQWRkcmVzcyA6OgoKSG9zdEtleSAvZXRjL3NzaC9zc2hfaG9zdF9yc2Ffa2V5CiNIb3N0 S2V5IC9ldGMvc3NoL3NzaF9ob3N0X2VjZHNhX2tleQpIb3N0S2V5IC9ldGMvc3NoL3NzaF9ob3N0 X2VkMjU1MTlfa2V5CgojIENpcGhlcnMgYW5kIGtleWluZwojUmVrZXlMaW1pdCBkZWZhdWx0IG5v bmUKCiMgVGhpcyBzeXN0ZW0gaXMgZm9sbG93aW5nIHN5c3RlbS13aWRlIGNyeXB0byBwb2xpY3ku IFRoZSBjaGFuZ2VzIHRvCiMgY3J5cHRvIHByb3BlcnRpZXMgKENpcGhlcnMsIE1BQ3MsIC4uLikg d2lsbCBub3QgaGF2ZSBhbnkgZWZmZWN0IGhlcmUuCiMgVGhleSB3aWxsIGJlIG92ZXJyaWRkZW4g YnkgY29tbWFuZC1saW5lIG9wdGlvbnMgcGFzc2VkIHRvIHRoZSBzZXJ2ZXIKIyBvbiBjb21tYW5k IGxpbmUuCiMgUGxlYXNlLCBjaGVjayBtYW51YWwgcGFnZXMgZm9yIHVwZGF0ZS1jcnlwdG8tcG9s aWNpZXMoOCkgYW5kIHNzaGRfY29uZmlnKDUpLgoKIyBMb2dnaW5nCiNTeXNsb2dGYWNpbGl0eSBB VVRIClN5c2xvZ0ZhY2lsaXR5IEFVVEhQUklWCiNMb2dMZXZlbCBJTkZPCgojIEF1dGhlbnRpY2F0 aW9uOgoKI0xvZ2luR3JhY2VUaW1lIDJtClBlcm1pdFJvb3RMb2dpbiB5ZXMKI1N0cmljdE1vZGVz IHllcwojTWF4QXV0aFRyaWVzIDYKI01heFNlc3Npb25zIDEwCgojUHVia2V5QXV0aGVudGljYXRp b24geWVzCgojIFRoZSBkZWZhdWx0IGlzIHRvIGNoZWNrIGJvdGggLnNzaC9hdXRob3JpemVkX2tl eXMgYW5kIC5zc2gvYXV0aG9yaXplZF9rZXlzMgojIGJ1dCB0aGlzIGlzIG92ZXJyaWRkZW4gc28g aW5zdGFsbGF0aW9ucyB3aWxsIG9ubHkgY2hlY2sgLnNzaC9hdXRob3JpemVkX2tleXMKQXV0aG9y aXplZEtleXNGaWxlCS5zc2gvYXV0aG9yaXplZF9rZXlzCgojQXV0aG9yaXplZFByaW5jaXBhbHNG aWxlIG5vbmUKCiNBdXRob3JpemVkS2V5c0NvbW1hbmQgbm9uZQojQXV0aG9yaXplZEtleXNDb21t YW5kVXNlciBub2JvZHkKCiMgRm9yIHRoaXMgdG8gd29yayB5b3Ugd2lsbCBhbHNvIG5lZWQgaG9z dCBrZXlzIGluIC9ldGMvc3NoL3NzaF9rbm93bl9ob3N0cwojSG9zdGJhc2VkQXV0aGVudGljYXRp b24gbm8KIyBDaGFuZ2UgdG8geWVzIGlmIHlvdSBkb24ndCB0cnVzdCB+Ly5zc2gva25vd25faG9z dHMgZm9yCiMgSG9zdGJhc2VkQXV0aGVudGljYXRpb24KI0lnbm9yZVVzZXJLbm93bkhvc3RzIG5v CiMgRG9uJ3QgcmVhZCB0aGUgdXNlcidzIH4vLnJob3N0cyBhbmQgfi8uc2hvc3RzIGZpbGVzCiNJ Z25vcmVSaG9zdHMgeWVzCgojIFRvIGRpc2FibGUgdHVubmVsZWQgY2xlYXIgdGV4dCBwYXNzd29y ZHMsIGNoYW5nZSB0byBubyBoZXJlIQojUGFzc3dvcmRBdXRoZW50aWNhdGlvbiB5ZXMKI1Blcm1p dEVtcHR5UGFzc3dvcmRzIG5vClBhc3N3b3JkQXV0aGVudGljYXRpb24geWVzCgojIENoYW5nZSB0 byBubyB0byBkaXNhYmxlIHMva2V5IHBhc3N3b3JkcwojQ2hhbGxlbmdlUmVzcG9uc2VBdXRoZW50 aWNhdGlvbiB5ZXMKQ2hhbGxlbmdlUmVzcG9uc2VBdXRoZW50aWNhdGlvbiBubwoKIyBLZXJiZXJv cyBvcHRpb25zCiNLZXJiZXJvc0F1dGhlbnRpY2F0aW9uIG5vCiNLZXJiZXJvc09yTG9jYWxQYXNz d2QgeWVzCiNLZXJiZXJvc1RpY2tldENsZWFudXAgeWVzCiNLZXJiZXJvc0dldEFGU1Rva2VuIG5v CiNLZXJiZXJvc1VzZUt1c2Vyb2sgeWVzCgojIEdTU0FQSSBvcHRpb25zCkdTU0FQSUF1dGhlbnRp Y2F0aW9uIHllcwpHU1NBUElDbGVhbnVwQ3JlZGVudGlhbHMgbm8KI0dTU0FQSVN0cmljdEFjY2Vw dG9yQ2hlY2sgeWVzCiNHU1NBUElLZXlFeGNoYW5nZSBubwojR1NTQVBJRW5hYmxlazV1c2VycyBu bwoKIyBTZXQgdGhpcyB0byAneWVzJyB0byBlbmFibGUgUEFNIGF1dGhlbnRpY2F0aW9uLCBhY2Nv dW50IHByb2Nlc3NpbmcsCiMgYW5kIHNlc3Npb24gcHJvY2Vzc2luZy4gSWYgdGhpcyBpcyBlbmFi bGVkLCBQQU0gYXV0aGVudGljYXRpb24gd2lsbAojIGJlIGFsbG93ZWQgdGhyb3VnaCB0aGUgQ2hh bGxlbmdlUmVzcG9uc2VBdXRoZW50aWNhdGlvbiBhbmQKIyBQYXNzd29yZEF1dGhlbnRpY2F0aW9u LiAgRGVwZW5kaW5nIG9uIHlvdXIgUEFNIGNvbmZpZ3VyYXRpb24sCiMgUEFNIGF1dGhlbnRpY2F0 aW9uIHZpYSBDaGFsbGVuZ2VSZXNwb25zZUF1dGhlbnRpY2F0aW9uIG1heSBieXBhc3MKIyB0aGUg c2V0dGluZyBvZiAiUGVybWl0Um9vdExvZ2luIHdpdGhvdXQtcGFzc3dvcmQiLgojIElmIHlvdSBq dXN0IHdhbnQgdGhlIFBBTSBhY2NvdW50IGFuZCBzZXNzaW9uIGNoZWNrcyB0byBydW4gd2l0aG91 dAojIFBBTSBhdXRoZW50aWNhdGlvbiwgdGhlbiBlbmFibGUgdGhpcyBidXQgc2V0IFBhc3N3b3Jk QXV0aGVudGljYXRpb24KIyBhbmQgQ2hhbGxlbmdlUmVzcG9uc2VBdXRoZW50aWNhdGlvbiB0byAn bm8nLgojIFdBUk5JTkc6ICdVc2VQQU0gbm8nIGlzIG5vdCBzdXBwb3J0ZWQgaW4gUkhFTCBhbmQg bWF5IGNhdXNlIHNldmVyYWwKIyBwcm9ibGVtcy4KVXNlUEFNIHllcwoKI0FsbG93QWdlbnRGb3J3 YXJkaW5nIHllcwojQWxsb3dUY3BGb3J3YXJkaW5nIHllcwojR2F0ZXdheVBvcnRzIG5vClgxMUZv cndhcmRpbmcgeWVzCiNYMTFEaXNwbGF5T2Zmc2V0IDEwCiNYMTFVc2VMb2NhbGhvc3QgeWVzCiNQ ZXJtaXRUVFkgeWVzCgojIEl0IGlzIHJlY29tbWVuZGVkIHRvIHVzZSBwYW1fbW90ZCBpbiAvZXRj L3BhbS5kL3NzaGQgaW5zdGVhZCBvZiBQcmludE1vdGQsCiMgYXMgaXQgaXMgbW9yZSBjb25maWd1 cmFibGUgYW5kIHZlcnNhdGlsZSB0aGFuIHRoZSBidWlsdC1pbiB2ZXJzaW9uLgpQcmludE1vdGQg bm8KCiNQcmludExhc3RMb2cgeWVzCiNUQ1BLZWVwQWxpdmUgeWVzCiNQZXJtaXRVc2VyRW52aXJv bm1lbnQgbm8KI0NvbXByZXNzaW9uIGRlbGF5ZWQKI0NsaWVudEFsaXZlSW50ZXJ2YWwgMAojQ2xp ZW50QWxpdmVDb3VudE1heCAzCiNVc2VETlMgbm8KI1BpZEZpbGUgL3Zhci9ydW4vc3NoZC5waWQK I01heFN0YXJ0dXBzIDEwOjMwOjEwMAojUGVybWl0VHVubmVsIG5vCiNDaHJvb3REaXJlY3Rvcnkg bm9uZQojVmVyc2lvbkFkZGVuZHVtIG5vbmUKCiMgbm8gZGVmYXVsdCBiYW5uZXIgcGF0aAojQmFu bmVyIG5vbmUKCiMgQWNjZXB0IGxvY2FsZS1yZWxhdGVkIGVudmlyb25tZW50IHZhcmlhYmxlcwpB Y2NlcHRFbnYgTEFORyBMQ19DVFlQRSBMQ19OVU1FUklDIExDX1RJTUUgTENfQ09MTEFURSBMQ19N T05FVEFSWSBMQ19NRVNTQUdFUwpBY2NlcHRFbnYgTENfUEFQRVIgTENfTkFNRSBMQ19BRERSRVNT IExDX1RFTEVQSE9ORSBMQ19NRUFTVVJFTUVOVApBY2NlcHRFbnYgTENfSURFTlRJRklDQVRJT04g TENfQUxMIExBTkdVQUdFCkFjY2VwdEVudiBYTU9ESUZJRVJTCgojIG92ZXJyaWRlIGRlZmF1bHQg b2Ygbm8gc3Vic3lzdGVtcwpTdWJzeXN0ZW0Jc2Z0cAkvdXNyL2xpYmV4ZWMvb3BlbnNzaC9zZnRw LXNlcnZlcgoKIyBFeGFtcGxlIG9mIG92ZXJyaWRpbmcgc2V0dGluZ3Mgb24gYSBwZXItdXNlciBi YXNpcwojTWF0Y2ggVXNlciBhbm9uY3ZzCiMJWDExRm9yd2FyZGluZyBubwojCUFsbG93VGNwRm9y d2FyZGluZyBubwojCVBlcm1pdFRUWSBubwojCUZvcmNlQ29tbWFuZCBjdnMgc2VydmVyCg== --0000000000006dcaf4060fef0cdd--