View Issue Details

IDProjectCategoryView StatusLast Update
0002194Kali LinuxTool Upgrade Requestpublic2015-04-02 22:26
ReporterMister_X Assigned Tomuts  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionno change required 
Product Version1.1.0 
Summary0002194: Add support to modern ciphers/kex/mac for openssh (server and client)
Description

I recently tried to use the ciphers on https://cipherli.st for OpenSSH server and client (at the bottom of the page. Unfortunately, most of the ciphers/key exchange/MAC are not supported since debian ships a very old version of openssh.

It would be great if we could use recent version of the ciphers, kex and mac.

It would be even better if those defaults were in ssh_config and sshd_config.

Additional Information

Current configuration on https://cipherli.st:

Server:

Protocol 2
HostKey /etc/ssh/ssh_host_ed25519_key
HostKey /etc/ssh/ssh_host_rsa_key
KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256
Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
MACs [email protected],[email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,[email protected]

Client:

HashKnownHosts yes
Host github.com
MACs [email protected],[email protected],hmac-sha2-512
Host *
ConnectTimeout 30
KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256
MACs [email protected],[email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,[email protected]
Ciphers [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
ServerAliveInterval 10
ControlMaster auto
ControlPersist yes
ControlPath ~/.ssh/socket-%r@%h:%p

Note: If any of the sshhost* files are missing, using ssh-keygen -A will generate them

Activities

muts

muts

2015-04-02 22:26

reporter   ~0003203

Thanks for the suggestion. We are unlikely to change the version of SSH in Kali outside of what ships with Debian.

Issue History

Date Modified Username Field Change
2015-03-30 22:57 Mister_X New Issue
2015-04-02 22:26 muts Note Added: 0003203
2015-04-02 22:26 muts Status new => closed
2015-04-02 22:26 muts Assigned To => muts
2015-04-02 22:26 muts Resolution open => no change required
2021-05-31 13:37 rhertzog Category Tool Upgrade => Tool Upgrade Request