search for: ntruprim

...ast as good security > as the status quo. > > This is more expensive than the previous defaults. You can disable > this if necessary on either the server or client configs, see > KexAlgorithms in ssh_config(5) and sshd_config(5). We should look at using an optimised version of NTRUPrime, at the moment we're just using a generic version that isn't very fast. There's probably a 3-5x saving to be made... -d

...Penalties that is applied when a connection is dropped by the new RefuseConnection keyword. * sshd(8): add a "Match invalid-user" predicate to sshd_config Match options that matches when the target username is not valid on the server. * ssh(1), sshd(8): update the Streamlined NTRUPrime code to a substantially faster implementation. * ssh(1), sshd(8): the hybrid Streamlined NTRUPrime/X25519 key exchange algorithm now has an IANA-assigned name in addition to the "@openssh.com" vendor extension name. This algorithm is now also available under this name &quot...

On Sun, 28 Jul 2024 at 22:34, radiatejava <radiatejava at gmail.com> wrote: > We upgraded sshd in our product from OpenSSH 8.6 to OpenSSH 9,.6. > After the upgrade, clients are seeing significant increase in time to > do ssh to the listener. Normally, a single ssh does not matter much > but some of our workflows involve about 3000 to 4000 ssh connect and > close and this is