search

fpoirotte / pssht

SSH server written in PHP
https://pssht.readthedocs.io
MIT License
43 stars 9 forks source link

Make it possible to whitelist algorithms #34

Open fpoirotte opened 7 years ago

fpoirotte commented 7 years ago

OpenSSH allows algorithms to be whitelisted through the Ciphers, KexAlgorithms, HostKeyAlgorithms, HostbasedAcceptedKeyTypes, MACs & PubkeyAcceptedKeyTypes options.

It would be great if pssht had similar options to restrict available algorithms, to avoid the use of weak/obsolete ones (arcfour, CBC mode, MD5/SHA1, etc.).