Re: How come the PQC algos don't show up in the ssh -Q lists

Roger Grimes via openssh-unix-dev <[email protected]> wrote:

> It's my understanding that at least 2-3 of the PQC algorithms (MLKEM768X25519-SHA256, SNTRUP761X25519-SHA512, ML-DSA + Ed25519) are available in OpenSSH now.
> 
> But when I run ssh -Q kex or -Q key I don't see them listed.
> 
> Should they be listed?

They are definately listed.  If they are not listed, they won't be used.

% ssh -Q kex
...
sntrup761x25519-sha512
[email protected]
mlkem768x25519-sha256
...

MLKEM768X25519-SHA256 is pointless and won't be happening.

[email protected] has been there for YEARS.
mlkem768x25519-sha256 has been there more than a year.

% ssh -Q key-sig
...
[email protected]
[email protected]
...

[email protected] is very new.  The code existed, but was
not enabled in the current release.  It was enabled after the last release
on 2026/07/09, and will be in the next release.


It is vaguely possible you are running an ssh derivative that is patching
them out due because they are misguided.