[Bug 1409798] Re: enable hmac-sha2-256, hmac-sha2-512 MAC algorithms

[Chris J Arges]

Thanks for the patch!
Sponsored for Vivid with a minimal change in the version. Please test after it becomes available in the archive.
After this we can push it into Utopic/Trusty following the SRU process:
https://wiki.ubuntu.com/StableReleaseUpdates
--chris

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1409798

Title:
  enable hmac-sha2-256, hmac-sha2-512 MAC algorithms

Status in dropbear package in Ubuntu:
  Triaged
Status in dropbear package in Debian:
  New

Bug description:
  Since version 2013.56, dropbear has supported the hmac-sha2-256 and
  hmac-sha2-512 MAC algorithms, but they are disabled by default.
  According to the dropbear changelog, enabling them is a matter of
  uncommenting the following two lines in options.h:

      /*#define DROPBEAR_SHA2_256_HMAC*/
      /*#define DROPBEAR_SHA2_512_HMAC*/

  Due to recent NSA revelations, some people are recommending users
  disable certain algorithms.  If the recommendations at
  <https://stribika.github.io/2015/01/04/secure-secure-shell.html> are
  followed, there are no MAC algorithms left that dropbear supports
  unless hmac-sha2-256 and hmac-sha2-512 are enabled.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dropbear/+bug/1409798/+subscriptions