]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: Use curve25519-sha256 kex where possible.
authordtucker@openbsd.org <dtucker@openbsd.org>
Wed, 21 Aug 2024 06:59:08 +0000 (06:59 +0000)
committerDarren Tucker <dtucker@dtucker.net>
Wed, 21 Aug 2024 07:08:06 +0000 (17:08 +1000)
commit25c52f37a82c4da48ec537de37d7c168982b8d6d
treeabd0fc300672efe7436fc755497aaec258442077
parent3eb62b7ba49483c309b483eb9002a679014f3887
upstream: Use curve25519-sha256 kex where possible.

Except where we're explicitly testing a different kex, use
curve25519-sha256 since it's faster than the default and supported even
when configured without OpenSSL.  Add a check to ensure that the kex we
intended to test is the one we actually tested. Speeds test up by ~5%.

OpenBSD-Regress-ID: 3b27fcc2ae953cb08fd82a0d3155c498b226d6e0
regress/rekey.sh