[Bug 1409798] [NEW] enable hmac-sha2-256, hmac-sha2-512 MAC algorithms

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Ubuntu Foundations Team Bug Bot (crichton):

Since version 2013.56, dropbear has supported the hmac-sha2-256 and
hmac-sha2-512 MAC algorithms, but they are disabled by default.
According to the dropbear changelog, enabling them is a matter of
uncommenting the following two lines in options.h:

    /*#define DROPBEAR_SHA2_256_HMAC*/
    /*#define DROPBEAR_SHA2_512_HMAC*/

Due to recent NSA revelations, some people are recommending users
disable certain algorithms.  If the recommendations at
<https://stribika.github.io/2015/01/04/secure-secure-shell.html> are
followed, there are no MAC algorithms left that dropbear supports unless
hmac-sha2-256 and hmac-sha2-512 are enabled.

** Affects: dropbear (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: dropbear (Debian)
     Importance: Unknown
         Status: Unknown


** Tags: patch
-- 
enable hmac-sha2-256, hmac-sha2-512 MAC algorithms
https://bugs.launchpad.net/bugs/1409798
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.