Changelog

1.6.0 - 2026-08-25

Features

  • Generic

    • add post-quantum named groups (#32)

    • add post-quantum authentication algorithms (#32)

    • add the NIST security levels and their bit security (#32)

    • add the algorithm name of the oqs-provider to the named group entries (#32)

    • add updater for the algorithms of the Open Quantum Safe project (#32)

    • add the ML-DSA authentication algorithm (#60)

    • add domain parameters for the elliptic curves (#65)

    • add the missing elliptic curves (#65)

    • add the elliptic curve parameter forms over extension fields (#65)

    • add the ANSI X9.62 optimal normal basis curves (#65)

    • add the GOST 512-bit parameter set C curve (#65)

    • add the missing object identifiers of the elliptic curves (#65)

    • add the missing sources of the elliptic curve domain parameters (#65)

    • add vulnerabilities for the elliptic curves (#65)

    • derive the field size of a well-known elliptic curve (#65)

    • add field size for every key parameter class (#65)

    • add parameters for the IKE and SSH algorithms (#65)

    • add key encapsulation mechanism parameters (#65)

    • add the composition of the hybrid named groups (#65)

    • add the missing post-quantum named groups (#65)

    • add names for the post-quantum named groups (#65)

    • add the Open Quantum Safe name to the post-quantum parameters (#65)

    • make the post-quantum parameters gradeable (#65)

    • set the size of a hybrid named group to null (#65)

    • add updater for the key encapsulation mechanisms (#65)

    • add updater for the hybrid named group compositions (#65)

    • add the hybrid compositions of the older releases (#65)

    • stop writing the named group registry (#65)

    • update the certificate transparency log list (#59)

    • preserve the existing entries when updating the certificate transparency log list (#59)

  • TLS (tls)

    • add post-quantum named curves (#32)

    • add the p384_mlkem1024 named curve of Tresorit (#32)

    • add post-quantum signature algorithms (#32)

    • add the initial and last protocol version to the named curves (#63)

    • add ML-DSA signature algorithms (#60)

    • add the TLS extension types sent by Chrome 152 (#60)

    • update Chromium client capabilities to 152 (#60)

    • update Firefox client capabilities to 152 (#60)

    • update Opera client capabilities to 133 (#60)

  • IKE (ike)

    • add implementation name and IANA name reverse lookups to the algorithm enums (#62)

    • add proposal token resolution to the algorithm enums (#62)

Notable fixes

  • Generic

    • set the field size of Curve25519 (#65)

    • set the field size of the third and fourth Oakley groups (#65)

    • set the group type of CECPQ2 to hybrid (#65)

    • rename the E384 named group to E382 (#65)

    • report the encoded key length as the EdDSA key size

    • correct the CAST5-40 key size

  • TLS (tls)

    • fix the named curve code points of the FrodoKEM-640-AES hybrids (#32)

Refactor

  • Generic

    • sort the data written by the updaters and detect the changes by comparing them (#32)

    • use parameters instead of named groups (#65)

    • share the well-known parameter shape (#65)

    • separate the post-quantum parameters from the other types (#65)

    • rename the named group field to key parameter in the hybrid groups (#65)

    • rename the curve type to key parameter in the ECDSA public keys (#65)

    • extract the client parameter base classes from the TLS client module (#60)

  • TLS (tls)

    • rename the named group field to key parameter in the named groups (#65)

  • SSH (ssh)

    • rename the named group field to key parameter in the elliptic curve identifiers (#65)

Other

  • switch to Markdown format in readme

  • add llms.txt to describe the library for large language models

  • use uv instead of pipenv and pip in the documentation

1.5.0 - 2026-07-31

Features

  • Generic

    • add long names to block cipher and MAC algorithm entries

    • add IANA assigned internet protocol numbers (#57)

  • IKE (ike)

    • add long name attribute to IKE registry entry parameters (#57)

    • add IKEv1 certificate types (#57)

    • add IKEv2 certificate types (#57)

    • add IKEv1 identification types (#57)

    • add IKEv2 identification types (#57)

    • add long names to the IKEv1 authentication method entries (#57)

Notable fixes

  • IKE (ike)

    • fix the code size of the IKEv2 authentication methods (#57)

    • fix the values of the IKEv2 hash algorithms according to the IANA registry (#57)

Improvements

  • Generic

    • add missing RSASSA-PSS signature algorithm (#57)

  • IKE (ike)

    • add missing IKEv2 authentication methods (#57)

    • add GSS-API IKEv1 authentication method (#57)

    • add missing IKEv2 certificate types (#57)

Refactor

  • IKE (ike)

    • unify the IKEv2 authentication method entries under the long name attribute (#57)

1.4.0 - 2026-07-17

Features

  • IKE (ike)

    • add vendor IDs (#58)

Notable fixes

  • Generic

    • fix CAST-128 key size

  • IKE (ike)

    • fix the notify level of IKEv2 status types

1.3.0 - 2026-06-15

Features

  • Generic

    • add elliptic-curve parameters (#53)

    • add trusted root CA certificates from notable stores

    • add Debian and RPM packaging (#56)

  • IKE (ike)

    • add IKE version definition (#55)

    • add per-implementation names to algorithm entries (#55)

    • add block ciphers

      • Blowfish (#39)

      • MARS (#40)

      • RC6 (#40)

      • Serpent (#40)

      • Twofish (#40)

    • add cipher modes

      • AES CTR, CCM, and GCM (#39)

      • Camellia CTR and CCM (#39)

      • GCM-8 for shortened ICV (#39)

      • GMAC (#39)

    • add AES-XCBC and AES-CMAC MAC entries (#40)

    • add AEAD attribute to encryption algorithms, block ciphers, and cipher modes (#40)

Notable fixes

  • Generic

    • fix Chacha20 key size (#39)

    • fix CAST block cipher variant naming (#39)

    • split Triple DES into 112-bit and 168-bit variants (#39)

  • IKE (ike)

    • map IKEv1 RFC 5114 Diffie-Hellman subgroups to their own parameters (#39)

1.2.1 - 2026-06-02

Features

  • Generic

    • add trusted root CA certificates from notable stores

    • add Certificate Transparency log trust store

  • TLS (tls)

    • add ShangMi (SM) algorithm and cipher suite support (#50)

  • DNS (dnsrec)

    • add typed SSHFP algorithm and fingerprint type references (#49)

1.2.0 - 2026-05-05

Features

  • IKE (ike)

    • add grade for IKEv1/IKEv2 algorithms (#37)

1.1.1 - 2026-05-03

Notable fixes

Features

  • Generic

    • add trusted root CA certificates from notable stores

  • TLS (tls)

    • add FREAK vulnerability property TLS cipher suites (#42)

    • add Logjam vulnerability property TLS cipher suites (#43)

1.1.0 - 2026-02-13

Features

  • IKE (ike)

    • add algorithms for IKEv1 implementation (#36)

    • add algorithms for IKEv2 implementation (#36)

  • Generic

    • add missing CT log operators

    • add new logs and update states

1.0.2 - 2025-12-30

Improvements

  • Generic

    • Install updater scripts as command-line tools (#35)

      update-ct-log, update-trust-stores

1.0.1 - 2025-12-07

Improvements

  • Generic

    • add missing PQC named curves

      SecP384r1MLKEM1024

  • SSH

    • add missing hybrid streamlined NTRU prime KEX algorithms (#33)

      sntrup761x25519-sha512

    • add PQ/T hybrid key exchange algorithms with ML-KEM

      mlkem768nistp256-sha256, mlkem1024nistp384-sha384, mlkem768x25519-sha256

1.0.0 - 2025-01-05

Refactor

  • Generic

    • Support only Python version greater than or equal to 3.9

    • Use pyproject.toml instead of setup.py

0.12.6 - 2024-12-08

Features

  • Generic

    • add certificate transparency (CT) logs (#24)

Improvements

  • Generic

    • add elliptic-curve parameters (#24)

    • add missing PQC named curves (#29)

      SecP256r1MLKEM768, X25519MLKEM768

  • TLS

    • add missing PQC named curves (#29)

      SECP256R1_ML_KEM_768, X25519_ML_KEM_768

    • add capabilities for Firefox version 108-133 (#30)

0.12.5 - 2024-05-25

Improvements

  • Generic

    • add missing PQC named curves (#25)

      Kyber-512-r3, Kyber-768-r3, Kyber-1024-r3, secp256r1/Kyber-512-r3,
      secp256r1/Kyber-768-r3, secp384r1/Kyber-768-r3,
      secp384r1/Kyber-1024-r3

    • test on Python 3.13 RC

  • TLS

    • add missing PQC named curves (#25)

      KYBER_512_R3, KYBER_768_R3, KYBER_1024_R3, SECP256R1_KYBER_512_R3,
      SECP256R1_KYBER_768_R3, SECP384R1_KYBER_768_R3,
      SECP521R1_KYBER_1024_R3, X25519_KYBER_512_R3, X25519_KYBER_768_R3

0.12.4 - 2024-04-28

Features

  • TLS

    • add supported protocol version to clients (#23)

0.12.3 - 2024-03-05

Notable fixes

  • TLS

    • fix MAC values of TLS 1.3 cipher suites (#21)

0.12.2 - 2024-01-11

Improvements

  • Generic

    • add metadata to documentation

    • add getter for well-know DH parameter by parameter numbers

0.12.1 - 2023-12-13

Improvements

  • SSH

    • add missing host key algorithms (#16)

      ecdsa-sha2-curve25519, ecdsa-sha2-nistb233, ecdsa-sha2-nistb409,
      ecdsa-sha2-nistk163, ecdsa-sha2-nistk233, ecdsa-sha2-nistk283,
      ecdsa-sha2-nistk409, ecdsa-sha2-nistp192, ecdsa-sha2-nistp224,
      ecdsa-sha2-nistt571, ssh-dsa, ssh-gost2001, ssh-gost2012-256,
      ssh-gost2012-512, ssh-rsa-sha2-256,
      ssh-rsa-sha2-256@attachmate.com, ssh-rsa-sha2-512,
      ssh-xmss-cert-v01@openssh.com, ssh-xmss@openssh.com,
      webauthn-sk-ecdsa-sha2-nistp256@openssh.com,
      x509v3-ecdsa-sha2-curve25519, x509v3-ecdsa-sha2-nistb233,
      x509v3-ecdsa-sha2-nistb409, x509v3-ecdsa-sha2-nistk163,
      x509v3-ecdsa-sha2-nistk233, x509v3-ecdsa-sha2-nistk283,
      x509v3-ecdsa-sha2-nistk409, x509v3-ecdsa-sha2-nistp192,
      x509v3-ecdsa-sha2-nistp224, x509v3-ecdsa-sha2-nistt571

    • add missing KEX algorithms (#16)

      curve25519-sha256, curve448-sha512, curve448-sha512@libssh.org,
      diffie-hellman-group-exchange-sha256@ssh.com,
      ecdh-sha2-1.2.840.10045.3.1.1, ecdh-sha2-1.2.840.10045.3.1.7,
      ecdh-sha2-1.3.132.0.1, ecdh-sha2-1.3.132.0.16,
      ecdh-sha2-1.3.132.0.26, ecdh-sha2-1.3.132.0.27,
      ecdh-sha2-1.3.132.0.33, ecdh-sha2-1.3.132.0.34,
      ecdh-sha2-1.3.132.0.35, ecdh-sha2-1.3.132.0.36,
      ecdh-sha2-1.3.132.0.37, ecdh-sha2-1.3.132.0.38,
      ecdh-sha2-4MHB+NBt3AlaSRQ7MnB4cg==,
      ecdh-sha2-5pPrSUQtIaTjUSt5VZNBjg==,
      ecdh-sha2-9UzNcgwTlEnSCECZa7V1mw==,
      ecdh-sha2-D3FefCjYoJ/kfXgAyLddYA==,
      ecdh-sha2-h/SsxnLCtRBh7I9ATyeB3A==,
      ecdh-sha2-m/FtSAmrV4j/Wy6RVUaK7A==,
      ecdh-sha2-mNVwCXAoS1HGmHpLvBC94w==,
      ecdh-sha2-qCbG5Cn/jjsZ7nBeR7EnOA==,
      ecdh-sha2-qcFQaMAMGhTziMT0z+Tuzw==, ecdh-sha2-secp256k1,
      ecdh-sha2-VqBg4QRPjxx1EXZdV0GdWQ==,
      ecdh-sha2-wiRIU8TKjMZ418sMqlqtvQ==,
      ecdh-sha2-zD/b3hu/71952ArpUG4OjQ==,
      gss-curve25519-sha256-*, gss-curve448-sha512-*, gss-gex-sha1-*,
      gss-gex-sha256-*, gss-group14-sha1-*, gss-group14-sha256-*,
      gss-group15-sha512-*, gss-group16-sha512-*, gss-group17-sha512-*,
      gss-group18-sha512-*, gss-group1-sha1-*, gss-nistp256-sha256-*,
      gss-nistp384-sha256-*, gss-nistp521-sha512-*,
      sm2kep-sha2-nistp256

    • add missing encryption algorithms (#16)

      aes128-cfb, aes192-gcm, aes192-gcm@openssh.com, aes256-cfb,
      aes256-gcm, blowfish, camellia128-cbc,
      camellia128-cbc@openssh.org, camellia128-ctr,
      camellia128-ctr@openssh.org, camellia192-cbc,
      camellia192-cbc@openssh.org, camellia192-ctr,
      camellia192-ctr@openssh.org, camellia256-cbc,
      camellia256-cbc@openssh.org, camellia256-ctr,
      camellia256-ctr@openssh.org, cast128-12-cbc, cast128-12-cfb,
      cast128-12-ecb, cast128-12-ofb, chacha20-poly1305, des,
      grasshopper-ctr128, idea-cbc, idea-ecb, idea-ofb,
      kuznechik-ofb, rijndael128, seed-ctr@ssh.com, serpent128-gcm,
      serpent128-gcm@libassh.org, serpent256-gcm,
      serpent256-gcm@libassh.org, sm4, sm4-cbc, sm4-cbc@huawei,
      sm4-ctr, twofish128-gcm, twofish128-gcm@libassh.org,
      twofish256-gcm, twofish256-gcm@libassh.org

    • add missing compression algorithms (#16)

      lz4@sensorsdata.cn

  • TLS

    • add grade for SSL cipher kinds (#18)

0.11.2 - 2023-11-13

Notable fixes

  • Generic

    • add missing garde for PQC algorithms

Refactor

  • Generic

    • move HTTP fetcher and digest generation to common utils

0.11.1 - 2023-11-06

Features

  • Generic

    • add missing PQC named curves (#14)

      x25519/Kyber-512-r3, x25519/Kyber-768-r3

  • TLS

    • add post-quantum safe hybrid curves (#14)

      X25519_KYBER_512_R3_CLOUDFLARE, X25519_KYBER_768_R3_CLOUDFLARE

  • SSH

    • distinguish host key algorithms use X.509 certificate from the one that use certificate chain (#12)

0.11.0 - 2023-10-28

Features

  • Generic

    • add named attacks (#10)

    • add well-known attack types (#10)

    • add grade for common cryptographic algorithms (#10)

    • add grade for public key sizes (#10)

  • DNS

    • add grade for DNSSEC algorithms (#10)

  • TLS

    • add grade for cipher suites (#10)

    • add grade for named groups (#10)

    • add grade for signature and hash algorithms (#10)

  • SSH

    • add grade for SSH algorithms (#10)

0.10.3 - 2023-10-12

Notable fixes

  • Generic

    • add missing dnsrec module to the packaging (#13)

0.10.2 - 2023-09-28

Improvements

  • Generic

    • implement value to object converter (#11)

0.10.1 - 2023-08-29

Features

  • DNS

    • add DNS resource record types (#8)

    • add DNSSEC algorithm types (#8)

      Delete DS, RSA/MD5, Diffie-Hellman, DSA/SHA1, RSA/SHA-1, DSA-NSEC3-SHA1, RSASHA1-NSEC3-SHA1, RSA/SHA-256, RSA/SHA-512, GOST R 34.10-2001, ECDSA Curve P-256 with SHA-256, ECDSA Curve P-384 with SHA-384, Ed25519, Ed448

    • add DNSSEC digest types (#8)

      SHA-1, SHA-256, GOST R 34.11-94, SHA-384

  • SSH

    • add elliptic curve domain parameters identifier (#8)

      nistp256, nistp384, nistp521, 1.3.132.0.1,
      1.2.840.10045.3.1.1, 1.3.132.0.33, 1.3.132.0.26,
      1.3.132.0.27, 1.3.132.0.16, 1.3.132.0.36, 1.3.132.0.37,
      1.3.132.0.38

0.10.0 - 2023-08-03

Features

  • Generic

    • add trusted root CA certificates from notable stores (#6)

    • add TLS feature querying function for X.509 certificates (#7)

      • Status request (OCSP must staple) extension

Notable fixes

  • Generic

    • X.509 extended validation checker

0.9.1 - 2023-06-22

Features

  • Generic

    • add well-know Diffie-Hellman parameters (#3)

      768-bit MODP Group/Oakley Group 1, 1024-bit MODP Group/Oakley Group 2, 1536-bit MODP Group/Oakley Group 5 2048-bit MODP Group/Oakley Group 14, 3072-bit MODP Group/Oakley Group 15 4096-bit MODP Group/Oakley Group 16, 6144-bit MODP Group/Oakley Group 17, 8192-bit MODP Group/Oakley Group 18, 1024-bit MODP Group with 160-bit Prime Order Subgroup, 2048-bit MODP Group with 224-bit Prime Order Subgroup, 2048-bit MODP Group with 256-bit Prime Order Subgroup, 2048-bit Finite Field Diffie-Hellman group, 3072-bit Finite Field Diffie-Hellman group, 4096-bit Finite Field Diffie-Hellman group, 6144-bit Finite Field Diffie-Hellman group, 8192-bit Finite Field Diffie-Hellman group, Apache builtins (2.0.18, 2.1.5), HAProxy builtins (1.6), NGINX builtins (0.7.2), Postfix builtins (2.2, 3.1, 3.6, 3.7), ProFTPD builtins (1.2.8, 1.3.2, 1.3.5, 1.3.7, 1.3.8), SOCAT builtins (1.7.3),

    • add certificate transparency (CT) logs (#5)

      Akamai CT Log, Alpha CT Log, Certly.IO log, Cloudflare ‘Nimbus2017’ Log, Cloudflare ‘Nimbus2018’ Log, Cloudflare ‘Nimbus2019’ Log, Cloudflare ‘Nimbus2020’ Log, Cloudflare ‘Nimbus2021’ Log, Cloudflare ‘Nimbus2022’ Log, Cloudflare ‘Nimbus2023’ Log, Cloudflare ‘Nimbus2024’ Log, CNNIC CT log, DigiCert Log Server, DigiCert Log Server 2, DigiCert Nessie2018 Log, DigiCert Nessie2019 Log, DigiCert Nessie2020 Log, DigiCert Nessie2021 Log, DigiCert Nessie2022 Log, DigiCert Nessie2023 Log, DigiCert Nessie2024 Log, DigiCert Nessie2025 Log, DigiCert Yeti2018 Log, DigiCert Yeti2019 Log, DigiCert Yeti2020 Log, DigiCert Yeti2021 Log, DigiCert Yeti2022-2 Log, DigiCert Yeti2022 Log, DigiCert Yeti2023 Log, DigiCert Yeti2024 Log, DigiCert Yeti2025 Log, GDCA CT log #1, GDCA CT log #2, GDCA Log 1, GDCA Log 2, Google ‘Argon2017’ log, Google ‘Argon2018’ log, Google ‘Argon2019’ log, Google ‘Argon2020’ log, Google ‘Argon2021’ log, Google ‘Argon2022’ log, Google ‘Argon2023’ log, Google ‘Argon2024’ log, Google ‘Aviator’ log, Google ‘Crucible’ log, Google ‘Daedalus’ log, Google ‘Icarus’ log, Google ‘Pilot’ log, Google ‘Rocketeer’ log, Google ‘Skydiver’ log, Google ‘Solera2018’ log, Google ‘Solera2019’ log, Google ‘Solera2020’ log, Google ‘Solera2021’ log, Google ‘Solera2022’ log, Google ‘Solera2023’ log, Google ‘Solera2024’ log, Google ‘Submariner’ log, Google ‘Testtube’ log, Google ‘Xenon2018’ log, Google ‘Xenon2019’ log, Google ‘Xenon2020’ log, Google ‘Xenon2021’ log, Google ‘Xenon2022’ log, Google ‘Xenon2023’ log, Google ‘Xenon2024’ log, Izenpe ‘Argi’ log, Izenpe log, Let’s Encrypt ‘Clicky’ log, Let’s Encrypt ‘Oak2019’ log, Let’s Encrypt ‘Oak2020’ log, Let’s Encrypt ‘Oak2021’ log, Let’s Encrypt ‘Oak2022’ log, Let’s Encrypt ‘Oak2023’ log, Let’s Encrypt ‘Oak2024H1’ log, Let’s Encrypt ‘Oak2024H2’ log, Let’s Encrypt ‘Sapling 2022h2’ log, Let’s Encrypt ‘Sapling 2023h1’ log, Let’s Encrypt ‘Testflume2019’ log, Let’s Encrypt ‘Testflume2020’ log, Let’s Encrypt ‘Testflume2021’ log, Let’s Encrypt ‘Testflume2022’ log, Let’s Encrypt ‘Testflume2023’ log, Nordu ‘flimsy’ log, Nordu ‘plausible’ log, PuChuangSiDa CT log, Qihoo 360 2020, Qihoo 360 2021, Qihoo 360 2022, Qihoo 360 2023, Qihoo 360 v1 2020, Qihoo 360 v1 2021, Qihoo 360 v1 2022, Qihoo 360 v1 2023, Sectigo ‘Dodo’ CT log, Sectigo ‘Mammoth’ CT log, Sectigo ‘Sabre’ CT log, SHECA CT log 1, SHECA CT log 2, StartCom log, Symantec Deneb, Symantec log, Symantec ‘Sirius’ log, Symantec ‘Vega’ log, Trust Asia CT2021, Trust Asia Log1, Trust Asia Log2020, Trust Asia Log2021, Trust Asia Log2022, Trust Asia Log2023, Trust Asia Log2024, Trust Asia Log2024-2, Up In The Air ‘Behind the Sofa’ log, Venafi Gen2 CT log, Venafi log, WoSign CT log #1, WoSign log, WoSign log 2,

0.8.5 - 2023-04-02

Features

  • Generic

    • convert Python classes of CryptoParser to JSON (#1)

    • add Python warepper to JSON data (#1)

  • SSH

    • add missing host key algorithms (#16)

      dsa2048-sha224@libassh.org, dsa2048-sha256@libassh.org,
      dsa3072-sha256@libassh.org,
      ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com,
      ecdsa-sha2-1.3.132.0.10, ecdsa-sha2-nistp256-cert-v01@openssh.com,
      ecdsa-sha2-nistp256, ecdsa-sha2-nistp384-cert-v01@openssh.com,
      ecdsa-sha2-nistp384, ecdsa-sha2-nistp521-cert-v01@openssh.com,
      ecdsa-sha2-nistp521, eddsa-e382-shake256@libassh.org,
      eddsa-e521-shake256@libassh.org, pgp-sign-dss, pgp-sign-rsa,
      rsa-sha2-256-cert-v01@openssh.com, rsa-sha2-256,
      rsa-sha2-512-cert-v01@openssh.com, rsa-sha2-512,
      sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,
      sk-ecdsa-sha2-nistp256@openssh.com,
      sk-ssh-ed25519-cert-v01@openssh.com,
      sk-ssh-ed25519@openssh.com, spki-sign-dss, spki-sign-rsa,
      ssh-dss-cert-v00@openssh.com, ssh-dss-cert-v01@openssh.com,
      ssh-dss-sha224@ssh.com, ssh-dss-sha256@ssh.com,
      ssh-dss-sha384@ssh.com, ssh-dss-sha512@ssh.com,
      ssh-dss, ssh-ed25519-cert-v01@openssh.com, ssh-ed25519,
      ssh-ed448-cert-v01@openssh.com, ssh-ed448,
      ssh-rsa-cert-v00@openssh.com, ssh-rsa-cert-v01@openssh.com,
      ssh-rsa-sha2-256-cert-v01@openssh.com,
      ssh-rsa-sha2-512-cert-v01@openssh.com,
      ssh-rsa-sha224@ssh.com, ssh-rsa-sha256@ssh.com,
      ssh-rsa-sha384@ssh.com, ssh-rsa-sha512@ssh.com,
      ssh-rsa, x509v3-ecdsa-sha2-1.3.132.0.10,
      x509v3-ecdsa-sha2-nistp256, x509v3-ecdsa-sha2-nistp384,
      x509v3-ecdsa-sha2-nistp521, x509v3-rsa2048-sha256,
      x509v3-sign-dss-sha1, x509v3-sign-dss-sha224@ssh.com,
      x509v3-sign-dss-sha256@ssh.com, x509v3-sign-dss-sha384@ssh.com,
      x509v3-sign-dss-sha512@ssh.com, x509v3-sign-dss,
      x509v3-sign-rsa-sha1, x509v3-sign-rsa-sha224@ssh.com,
      x509v3-sign-rsa-sha256@ssh.com, x509v3-sign-rsa-sha384@ssh.com,
      x509v3-sign-rsa-sha512@ssh.com, x509v3-sign-rsa, x509v3-ssh-dss,
      x509v3-ssh-ed25519, x509v3-ssh-ed448, x509v3-ssh-rsa

    • add missing KEX algorithms (#16)

      diffie-hellman-group1-sha1, diffie-hellman-group1-sha256,
      diffie-hellman-group1-sha1-win7@microsoft.com,
      diffie-hellman-group14-sha1,
      diffie-hellman-group14-sha1-win7@microsoft.com,
      diffie-hellman-group14-sha224@ssh.com,
      diffie-hellman-group14-sha256,
      diffie-hellman-group14-sha256@ssh.com,
      diffie-hellman-group15-sha256,
      diffie-hellman-group15-sha256@ssh.com,
      diffie-hellman-group15-sha384@ssh.com,
      diffie-hellman-group15-sha512,
      diffie-hellman-group16-sha256,
      diffie-hellman-group16-sha384@ssh.com,
      diffie-hellman-group16-sha512,
      diffie-hellman-group16-sha512@ssh.com,
      diffie-hellman-group17-sha512,
      diffie-hellman-group18-sha512,
      diffie-hellman-group18-sha512@ssh.com,
      diffie-hellman-group-exchange-sha1,
      diffie-hellman-group-exchange-sha256,
      diffie-hellman-group-exchange-sha256-win7@microsoft.com,
      diffie-hellman-group-exchange-sha512,
      diffie-hellman-group-exchange-sha224@ssh.com,
      diffie-hellman-group-exchange-sha384@ssh.com,
      diffie-hellman-group-exchange-sha512@ssh.com,
      ecdh-sha2-1.3.132.0.10, ecdh-sha2-brainpoolp256r1@genua.de,
      ecdh-sha2-brainpoolp384r1@genua.de,
      ecdh-sha2-brainpoolp521r1@genua.de,
      ecdh-sha2-curve25519, ecdh-sha2-nistb233, ecdh-sha2-nistb409,
      ecdh-sha2-nistk163, ecdh-sha2-nistk233, ecdh-sha2-nistk283,
      ecdh-sha2-nistk409, ecdh-sha2-nistp192, ecdh-sha2-nistp224,
      ecdh-sha2-nistp256, ecdh-sha2-nistp256-win7@microsoft.com,
      ecdh-sha2-nistp384, ecdh-sha2-nistp384-win7@microsoft.com,
      ecdh-sha2-nistp521, ecdh-sha2-nistp521-win7@microsoft.com,
      ecdh-sha2-nistt571, ecmqv-sha2, curve25519-sha256,
      curve25519-sha256@libssh.org, curve448-sha512,
      kexguess2@matt.ucc.asn.au, m383-sha384@libassh.org,
      m511-sha512@libassh.org, rsa1024-sha1, rsa2048-sha256,
      sntrup4591761x25519-sha512@tinyssh.org,
      sntrup761x25519-sha512@openssh.com

    • add missing encryption algorithms (#1)

      3des-cbc, 3des-cfb, 3des-ctr, 3des-ecb, 3des-ofb,
      acss@openssh.org, aes128-cbc, aes128-ctr,
      aes128-gcm@openssh.com, aes128-gcm, aes192-cbc, aes192-ctr,
      aes256-cbc, aes256-ctr, aes256-gcm@openssh.com, arcfour128,
      arcfour256, arcfour, blowfish-cbc, blowfish-cfb,
      blowfish-ctr, blowfish-ecb, blowfish-ofb,
      cast128-12-cbc@ssh.com, cast128-12-cfb@ssh.com,
      cast128-12-ecb@ssh.com, cast128-12-ofb@ssh.com,
      cast128-cbc, cast128-cfb, cast128-ctr, cast128-ecb,
      cast128-ofb, cast256-cbc, chacha20-poly1305@openssh.com,
      crypticore128@ssh.com, des-cbc@ssh.com, des-cbc, des-cfb,
      des-ctr, des-ecb, des-ofb, gost89-cnt, gost89,
      grasshopper-cbc, grasshopper-ctr, idea-cfb, idea-ctr,
      none, rc2-cbc@ssh.com, rc2-cbc, rc2-ctr,
      rijndael-cbc@lysator.liu.se, rijndael-cbc@ssh.com,
      rijndael128-cbc, rijndael192-cbc, rijndael256-cbc,
      seed-cbc@ssh.com, serpent128-cbc, serpent128-ctr,
      serpent192-cbc, serpent192-ctr, serpent256-cbc,
      serpent256-ctr, twofish-cbc, twofish-cfb, twofish-ctr,
      twofish-ecb, twofish-ofb, twofish128-cbc, twofish128-ctr,
      twofish192-cbc, twofish192-ctr, twofish256-cbc,
      twofish256-ctr

    • add missing compression algorithms (#1)

      none, zlib@openssh.com, zlib

  • TLS