Gex tests for clients - Githubissues

jtesta / ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

MIT License

3.36k stars 176 forks source link

Gex tests for clients #238

Open ecki opened 9 months ago

ecki commented 9 months ago

Pardon if #i missed it, to study what clients propose as GEX sizes it would be good if the - client audit has a -g128 (or similar) mode switch where it only offer DHGEX and AES128 ciphers (or 256) forcing the client to reveal its min,pref,max range it would use for this security level.

jtesta commented 6 months ago

Yes, I do think this is something that can be tested. I just added the "help wanted" label to this issue, since it might be a while before I'll have time to implement it myself. In the meantime, if anyone from the community wanted to submit a PR, that would be most welcome!

ecki commented 6 months ago

Thanks. I can try but I dont know python, hehe.