4 ms·
It's also fun to change the encryption: KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256 Ciphers aes256-gcm@openssh.com,aes128-
by swills 11y ago
It's also fun to change the encryption:
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com
in sshd_config. From what I've seen, the brute forcers can't work with this. (If you're sshd doesn't: upgrade)
- throwaway2048 11y agoits worth noting that essentially only openssh clients will work with these settings, and newer ones at that.