ioerror / duraconf

duraconf - A collection of hardened configuration files for SSL/TLS services
http://www.appelbaum.net/
977 stars 91 forks source link

Update sshd MACs list #26

Open EtiennePerot opened 10 years ago

EtiennePerot commented 10 years ago

Rebased version of pull request #15.

Update sshd's preferred MACs list in order to

a) favor stronger hash functions (sha512 and sha256) over sha1 b) favor Encrypt-then-MAC (*-etm) modes over regular (Encrypt-and-MAC) modes.

The Encrypt-then-MAC modes were released as part of OpenSSH 6.2.