From 7b6cf7b776bc1d9e5f9ee5054eed2d44091ac52a Mon Sep 17 00:00:00 2001 From: Mat Date: Fri, 9 Aug 2024 10:47:05 +0200 Subject: [PATCH] DIsallow Encrypt-And-MAC MAC algorithms in modern config --- docs/guidelines/openssh.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/guidelines/openssh.md b/docs/guidelines/openssh.md index dd94981..07a9b12 100644 --- a/docs/guidelines/openssh.md +++ b/docs/guidelines/openssh.md @@ -35,7 +35,7 @@ KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384 Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr -MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com +MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com # Password based logins are disabled - only public key based logins are allowed. AuthenticationMethods publickey