nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-01-09 17:38:00 +00:00
Code Issues Projects Releases Wiki Activity

Put HMAC-SHA-512 below HMAC-SHA-256 in priority.

Browse Source 
For the same reason that diffie-hellman-group18 goes below group16:
it's useful to _have_ it there, in case a server demands it, but under
normal circumstances it seems like overkill and a waste of CPU.
SHA-256 is not only intrinsically faster, it's also more likely to be
hardware-accelerated, so PuTTY's preference is to use that if possible
and SHA-512 only if necessary.
This commit is contained in:
Simon Tatham 2023-04-22 00:07:51 +01:00
parent b77e985513
commit 289d123fb8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ssh/transport2.c
View File

@ -20,7 +20,7 @@ const struct ssh_signkey_with_user_pref_id ssh2_hostkey_algs[] = {
};
const static ssh2_macalg *const macs[] = {
&ssh_hmac_sha512, &ssh_hmac_sha256,
&ssh_hmac_sha256, &ssh_hmac_sha512,
&ssh_hmac_sha1, &ssh_hmac_sha1_96, &ssh_hmac_md5
};
const static ssh2_macalg *const buggymacs[] = {