v2.1.1

This maintenance release focuses on improving support for client testing. The full changelog is:

• Added 2 new host key types: [email protected], [email protected].
• Added 2 new ciphers: des, 3des.
• Added 3 new PuTTY vulnerabilities.
• During client testing, client IP address is now listed in output.

Also included is the first Windows release!

v2.1.0

The highlights of this release include client-testing functionality to audit the protocols accepted by client software, a JSON output format, support for new algorithms, and bugfixes. Below is the full changelog:

• Added client software auditing functionality (see -c / --client-audit option).
• Added JSON output option (see -j / --json option; credit Andreas Jaggi).
• Fixed crash while scanning Solaris Sun_SSH.
• Added 9 new key exchanges: gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha1-, gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha256-toWM5Slw5Ew8Mqkay+al2g==, gss-group15-sha512-toWM5Slw5Ew8Mqkay+al2g==, diffie-hellman-group15-sha256, ecdh-sha2-1.3.132.0.10, curve448-sha512.
• Added 1 new host key type: ecdsa-sha2-1.3.132.0.10.
• Added 4 new ciphers: idea-cbc, serpent128-cbc, serpent192-cbc, serpent256-cbc.
• Added 6 new MACs: [email protected], [email protected], hmac-ripemd, [email protected], [email protected], [email protected].

v2.0.0

This is the first release of ssh-audit in almost three years! It features the following major improvements:

• Forked from https://github.com/arthepsy/ssh-audit (development was stalled, and developer went MIA).
• Added RSA host key length test.
• Added RSA certificate key length test.
• Added Diffie-Hellman modulus size test.
• Now outputs host key fingerprints for RSA and ED25519.
• Added 5 new key exchanges: [email protected], [email protected], [email protected], diffie-hellman-group16-sha256, diffie-hellman-group17-sha512.
• Added 3 new encryption algorithms: des-cbc-ssh1, blowfish-ctr, twofish-ctr.
• Added 10 new MACs: hmac-sha2-56, hmac-sha2-224, hmac-sha2-384, hmac-sha3-256, hmac-sha3-384, hmac-sha3-512, hmac-sha256, [email protected], hmac-sha512, [email protected].
• Added command line argument (-t / --timeout) for connection & reading timeouts.
• Updated CVEs for libssh & Dropbear.