OpenSSH 10.4/10.4p1 Released

Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

When pq key agreement was added in 2019, it took almost 3 years for it to become enabled by default. This isn't criticism, just an observation. I don't have a pressing need for pq sigs. Always happy for new OpenSSH releases though!

	▲	throw0101a 27 minutes ago \| parent [-]
		> Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default. The draft was only published a few months ago: * https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e... The draft is a 'personal document', so not associated with the IETF/WG.

▲

throw0101a 3 hours ago | parent | prev | next [-]

HTML version of release notes:

* https://www.openssh.org/releasenotes.html#10.4

	▲	atonse 30 minutes ago \| parent [-]
		Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

▲

lousken 2 hours ago | parent | prev [-]

Is hmac-sha1 and umac-64 still enabled by default?

	▲	throw0101a 17 minutes ago \| parent [-]
		Yes: * https://man.openbsd.org/ssh_config.5#MACs * https://man.openbsd.org/sshd_config.5#MACs ETM, encrypt-than-mac, variants are at the front of the preference list. * https://en.wikipedia.org/wiki/UMAC_(cryptography)