"Terrapin can also override an older extension parameter specifying the use of the SHA2 cryptographic hash function. As a result, SSH will instead use the weake

"Terrapin can also override an older extension parameter specifying the use of the SHA2 cryptographic hash function. As a result, SSH will instead use the weaker SHA1." I'm curious if Tinyssh is immune to this attack, since it doesn't implement sha1 (especially as I'm using it in several places). "State-of-the-art crypto: ssh-ed25519, curve25519-sha256, chacha20-poly1305@openssh.com" https://tinyssh.org/ https://tinyssh.org/