Skip to content

Commit 4ee8dc6

Browse files
author
Andrew
authored
Removed sha1-based MACs from default config (#706)
1 parent cb23f0d commit 4ee8dc6

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

myproposal.h

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,17 @@
6363

6464
#define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
6565

66+
#ifdef WINDOWS
67+
#define KEX_SERVER_MAC \
68+
"umac-64-etm@openssh.com," \
69+
"umac-128-etm@openssh.com," \
70+
"hmac-sha2-256-etm@openssh.com," \
71+
"hmac-sha2-512-etm@openssh.com," \
72+
"umac-64@openssh.com," \
73+
"umac-128@openssh.com," \
74+
"hmac-sha2-256," \
75+
"hmac-sha2-512,"
76+
#else
6677
#define KEX_SERVER_MAC \
6778
"umac-64-etm@openssh.com," \
6879
"umac-128-etm@openssh.com," \
@@ -74,6 +85,7 @@
7485
"hmac-sha2-256," \
7586
"hmac-sha2-512," \
7687
"hmac-sha1"
88+
#endif
7789

7890
#define KEX_CLIENT_MAC KEX_SERVER_MAC
7991

0 commit comments

Comments
 (0)