[ssh_x509] PKIX-SSH release 14.4

[ssh_x509 at roumenpetrov.info]

Hello,

And now more details ...

ssh_x509 at roumenpetrov.info wrote:
> Hello,
>
> New release 14.4 is available for download.
>
> Main is a protocol extension to avoid prefix truncation that breaks ssh channel integrity (Terrapin attack) CVE-2023-48795 .
> [...]

(x) Security:

(*) custom "strict key exchange" extension
Avoid prefix truncation attack on the secsh binary packet protocol(terrapin attack). Another work-around is do not use ChaCha20-Poly1305 and EtM MACs, for more details see "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation" https://arxiv.org/pdf/2312.12422.pdf.

(*) shell meta-characters
Refuse user or host names provided on the command line that contain most shell meta-characters. Note this countermeasure is not guaranteed to be effective in all cases.


(x) Features:

(*) generate RSA key by default in FIPS mode
Note since PKIX-SSH 14.3 is generated Ed25519 key by default.

(*) add ChannelTimeout support to the client

(*) add %j token that expands to the configured ProxyJump hostname


(x) Bugs:

(*) sftp limits
Return error if custom "limits" extender extension does not receive reply.

(*) %H token
Update KnownHostsCommand to use exact value for %H token.

(*) x509v3-ssh-ed25519 in FIPS mode
Explicitly deactivate algorithm "x509v3-ssh-ed25519" from defaults in FIPS mode. Some vendor OpenSSL 1.1.1 releases crash in EVP_MD_flags() when library is in FIPS mode and "none" digest as argument.

(*) address filter
When connecting via socket filter addresses by AddressFamily if one was specified.


(x) Misc:

(*) prefer PRIV_XPOLICY to PRIV_LIMIT on Solaris 11.1+

(*) log unmatched paths in secure copy

(*) release GSS OIDs only at end of authentication

(*) Avoids unnecessary init/cleanup cycles.

(*) manual pages
Spelling and etc.


Regards,
Roumen Petrov

-- 
Advanced secure shell implementation with X.509 certificate support
http://roumenpetrov.info/secsh/