ssh-audit

No entries match these filters. Clear filters

1. v3.9.0 Jul 4, 2026 · issue 014

   ssh-audit v3.9.0 adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. warnings, UNIX socket scanning, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, and built-in hardening guides.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.9.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.9.0

   └──▷ TRY IT
   Audit an SSH daemon exposed only via a UNIX socket inside a container or CI/CD pipeline — no TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port required.
   copy

   $ ssh-audit unix:///run/ssh-unix-local/socket

   Scan an internal host through a SOCKS5 jump proxy — useful when direct connectivity to the target is unavailable.
   copy

   $ ssh-audit --socks5 proxy.example.com:1080 target-host.internal

   Retrieve the built-in hardening guide for a specific platform to apply recommended SSH configuration without visiting an external site.
   copy

   $ ssh-audit --list-hardening-guides
   ssh-audit --get-hardening-guide "Debian 13"

   • Adds warnings on all key exchanges lacking post-quantum protection, flagging exposure to Harvest Now, Decrypt Later attacks.
   • New --list-hardening-guides and --get-hardening-guide flags surface built-in hardening guides for common platforms (Debian, Ubuntu, Rocky Linux, OpenSSH) without requiring internet access.
   • Supports scanning SSH servers over UNIX sockets (e.g. unix:///path/to/socket), enabling auditing in containerized and CI/CD environments.
   • New --socks5 host:port flag enables scanning through a SOCKS5 proxy (implies --skip-rate-test).
   • Identifies 2 new post-quantum key exchanges: mlkem768nistp256-sha256 and mlkem1024nistp384-sha384.

   +6 more show less

   • Identifies 11 new host key types including ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. variants (mldsa-44, mldsa-65, mldsa-87, and OpenSSH-namespaced equivalents) and webauthn-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com.
   • Identifies 2 new ciphers: AEAD_CAMELLIA_128_GCM and AEAD_CAMELLIA_256_GCM.
   • Adds allow_hostkey_subset_and_reordering policy option, letting policy definitions accept targets with a stricter or differently-ordered host key list.
   • Adds built-in policies for OpenSSH 10.0 through 10.4 and new platform guides for Debian 13, Rocky Linux 10, and Ubuntu 26.04.
   • Removes SSHv1 support entirely.
   • Batch mode (-b) no longer implicitly enables verbose mode; use -v explicitly when needed.

   11 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Support for Python 3.8 has been dropped, so setups running ssh-audit on Python 3.8 will no longer work.
   • !Support for Python 3.9 has been dropped, so setups running ssh-audit on Python 3.9 will no longer work.
   • !SSHv1 support has been removed, so any scans or configurations relying on SSHv1 scanning will no longer function.
   • !Batch mode (-b) no longer automatically enables verbose mode, so scripts or workflows that depended on batch mode implying verbose output will see less output unless -v is explicitly added.
2. v3.9.0 Jul 4, 2026 · issue 003

   ssh-audit v3.9.0 adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. warnings, UNIX socket scanning, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, and built-in hardening guides.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.9.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.9.0

   └──▷ TRY IT
   Audit an SSH daemon exposed only via a UNIX socket inside a container or CI/CD pipeline — no TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port required.
   copy

   $ ssh-audit unix:///run/ssh-unix-local/socket

   Scan an internal host through a SOCKS5 jump proxy — useful when direct connectivity to the target is unavailable.
   copy

   $ ssh-audit --socks5 proxy.example.com:1080 target-host.internal

   Retrieve the built-in hardening guide for a specific platform to apply recommended SSH configuration without visiting an external site.
   copy

   $ ssh-audit --list-hardening-guides
   ssh-audit --get-hardening-guide "Debian 13"

   • Adds warnings on all key exchanges lacking post-quantum protection, flagging exposure to Harvest Now, Decrypt Later attacks.
   • New --list-hardening-guides and --get-hardening-guide flags surface built-in hardening guides for common platforms (Debian, Ubuntu, Rocky Linux, OpenSSH) without requiring internet access.
   • Supports scanning SSH servers over UNIX sockets (e.g. unix:///path/to/socket), enabling auditing in containerized and CI/CD environments.
   • New --socks5 host:port flag enables scanning through a SOCKS5 proxy (implies --skip-rate-test).
   • Identifies 2 new post-quantum key exchanges: mlkem768nistp256-sha256 and mlkem1024nistp384-sha384.

   +6 more show less

   • Identifies 11 new host key types including ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. variants (mldsa-44, mldsa-65, mldsa-87, and OpenSSH-namespaced equivalents) and webauthn-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com.
   • Identifies 2 new ciphers: AEAD_CAMELLIA_128_GCM and AEAD_CAMELLIA_256_GCM.
   • Adds allow_hostkey_subset_and_reordering policy option, letting policy definitions accept targets with a stricter or differently-ordered host key list.
   • Adds built-in policies for OpenSSH 10.0 through 10.4 and new platform guides for Debian 13, Rocky Linux 10, and Ubuntu 26.04.
   • Removes SSHv1 support entirely.
   • Batch mode (-b) no longer implicitly enables verbose mode; use -v explicitly when needed.

   11 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Support for Python 3.8 has been dropped, so setups running ssh-audit on Python 3.8 will no longer work.
   • !Support for Python 3.9 has been dropped, so setups running ssh-audit on Python 3.9 will no longer work.
   • !SSHv1 support has been removed, so any scans or configurations relying on SSHv1 scanning will no longer function.
   • !Batch mode (-b) no longer automatically enables verbose mode, so scripts or workflows that depended on batch mode implying verbose output will see less output unless -v is explicitly added.
3. v3.9.0 Jul 4, 2026 · issue 001

   ssh-audit v3.9.0 adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. warnings, UNIX socket scanning, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, and built-in hardening guides.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.9.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.9.0

   └──▷ TRY IT
   Audit an SSH daemon exposed only via a UNIX socket inside a container or CI/CD pipeline — no TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port required.
   copy

   $ ssh-audit unix:///run/ssh-unix-local/socket

   Scan an internal host through a SOCKS5 jump proxy — useful when direct connectivity to the target is unavailable.
   copy

   $ ssh-audit --socks5 proxy.example.com:1080 target-host.internal

   Retrieve the built-in hardening guide for a specific platform to apply recommended SSH configuration without visiting an external site.
   copy

   $ ssh-audit --list-hardening-guides
   ssh-audit --get-hardening-guide "Debian 13"

   • Adds warnings on all key exchanges lacking post-quantum protection, flagging exposure to Harvest Now, Decrypt Later attacks.
   • New --list-hardening-guides and --get-hardening-guide flags surface built-in hardening guides for common platforms (Debian, Ubuntu, Rocky Linux, OpenSSH) without requiring internet access.
   • Supports scanning SSH servers over UNIX sockets (e.g. unix:///path/to/socket), enabling auditing in containerized and CI/CD environments.
   • New --socks5 host:port flag enables scanning through a SOCKS5 proxy (implies --skip-rate-test).
   • Identifies 2 new post-quantum key exchanges: mlkem768nistp256-sha256 and mlkem1024nistp384-sha384.

   +6 more show less

   • Identifies 11 new host key types including ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. variants (mldsa-44, mldsa-65, mldsa-87, and OpenSSH-namespaced equivalents) and webauthn-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com.
   • Identifies 2 new ciphers: AEAD_CAMELLIA_128_GCM and AEAD_CAMELLIA_256_GCM.
   • Adds allow_hostkey_subset_and_reordering policy option, letting policy definitions accept targets with a stricter or differently-ordered host key list.
   • Adds built-in policies for OpenSSH 10.0 through 10.4 and new platform guides for Debian 13, Rocky Linux 10, and Ubuntu 26.04.
   • Removes SSHv1 support entirely.
   • Batch mode (-b) no longer implicitly enables verbose mode; use -v explicitly when needed.

   11 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Support for Python 3.8 has been dropped, so setups running ssh-audit on Python 3.8 will no longer work.
   • !Support for Python 3.9 has been dropped, so setups running ssh-audit on Python 3.9 will no longer work.
   • !SSHv1 support has been removed, so any scans or configurations relying on SSHv1 scanning will no longer function.
   • !Batch mode (-b) no longer automatically enables verbose mode, so scripts or workflows that depended on batch mode implying verbose output will see less output unless -v is explicitly added.
4. v3.3.0 Oct 15, 2024 · release notes

   ssh-audit v3.3.0 adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key exchanges, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. DHEat support, new built-in policies, and LANcom device recognition.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.3.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.3.0

   └──▷ TRY IT
   Scan a list of hosts on a non-standard port, letting individual entries override the default — useful for bulk audits of a mixed fleet.
   copy

   $ ssh-audit -T targets.txt -p 222

   • Adds built-in policies for Ubuntu 24.04 LTS server & client, OpenSSH 9.8, and OpenSSH 9.9.
   • Adds IPv6 support for DHEat and connection rate tests.
   • Adds TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port information to JSON output from policy scans.
   • Adds LANcom LCOS server recognition and Ed448 key extraction.
   • Reports ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. and DSS fingerprints when running in verbose mode.

   +3 more show less

   • Adds support for post-quantum key exchanges mlkem768x25519-sha256 and sntrup761x25519-sha512.
   • When scanning multiple targets with -T/--targets, the -p/--port option now sets the default port for all hosts that don't specify one explicitly.
   • Updated built-in policies for Amazon Linux 2023, Debian 12, Rocky Linux 9, and Ubuntu 22.04 to improve host key efficiency and quantum-attack cipher resistance.

   8 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !CVE information based on server/client version numbers has been removed entirely from output.
5. v3.2.0 Apr 22, 2024 · release notes

   ssh-audit v3.2.0 adds --dheat flag, custom policy directives, and new cipher/key exchange support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.2.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.2.0

   └──▷ TRY IT
   Test a target server for the DHEat denial-of-service vulnerability
   copy

   $ ssh-audit --dheat <target>

   Disable color output in terminal sessions that do not support or require ANSI colors
   copy

   $ NO_COLOR=1 ssh-audit <target>

   • Added --dheat option to test targets for the DHEat denial-of-service attack
   • Added allow_algorithm_subset_and_reordering directive to custom policies to allow targets to pass with subset or re-ordered lists of host keys, kex, ciphers, and MACs
   • Added allow_larger_keys directive to custom policies to allow targets to pass with larger host keys, CA keys, and Diffie-Hellman keys
   • Color output is disabled if the NO_COLOR environment variable is set
   • Added 1 new key exchange algorithm: gss-nistp384-sha384-*

   +1 more show less

   • Added 1 new cipher: aes128-ocb@libassh.org

   6 details in Everything

6. v3.1.0 Dec 20, 2023 · release notes

   ssh-audit v3.1.0 adds Python 3.12 support and additional_notes field in JSON output

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.1.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.1.0

   └──▷ USE IT
   Retrieve SSH audit results in JSON format and inspect the additional_notes field for extra context.
   shell copy

   ssh-audit -J <target> | jq '.additional_notes'

   • Adds Python 3.12 support, dropping Python 3.7.
   • Adds built-in policies for OpenSSH 9.5 and 9.6.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Drops support for Python 3.7.
7. v3.0.0 Sep 7, 2023 · release notes

   ssh-audit v3.0.0 adds notes to JSON output, 49 new algorithms, and multi-host scan fixes

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.0.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v3.0.0

   • Adds failure, warning, and info notes fields to the JSON output schema for banner protocol, enc, and mac items.
   • Adds 12 new host key types: ecdsa-sha2-curve25519, ecdsa-sha2-nistb233, ecdsa-sha2-nistb409, ecdsa-sha2-nistk163, ecdsa-sha2-nistk233, ecdsa-sha2-nistk283, ecdsa-sha2-nistk409, ecdsa-sha2-nistp224, ecdsa-sha2-nistp192, ecdsa-sha2-nistt571, ssh-dsa, and x509v3-sign-rsa-sha256.
   • Adds 15 new key exchange algorithms including curve448-sha512@libssh.org, ecdh-nistp256-kyber-512r3-sha256-d00@openquantumsafe.org, and various Amazon KyberKyberNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. implementations.
   • Adds 8 new ciphers: aes192-gcm@openssh.com, cast128-12-cbc, cast128-12-cfb, cast128-12-ecb, cast128-12-ofb, des-cfb, des-ecb, and des-ofb.
   • Adds 14 new MACs: cbcmac-3des, cbcmac-aes, cbcmac-blowfish, cbcmac-des, cbcmac-rijndael, cbcmac-twofish, hmac-sha256-96, md5, md5-8, ripemd160, ripemd160-8, sha1, sha1-8, and umac-128.

   +1 more show less

   • Adds built-in policy for OpenSSH 9.4 client algorithm prioritization.

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The JSON output schema changes: banner protocol, enc, and mac fields now include notes arrays (failure, warning, info), breaking parsers expecting the old field structure.
8. v2.9.0 Apr 29, 2023 · release notes

   ssh-audit v2.9.0 adds -g/--gex-test, host key/CA cert support, and expanded policy coverage.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.9.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v2.9.0

   • Adds -g and --gex-test flags for granular GEX modulus size tests
   • JSON output now includes recommendations and CVE fields
   • JSON target field always includes the port number (e.g., host:22)
   • Adds support for mixed host key/CA key certificates (e.g., RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. host keys signed by ED25519 CAs)
   • Prints warnings for 2048-bit moduli during analysis

   +6 more show less

   • SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications. algorithms now trigger failure status in results
   • CBC mode ciphers downgraded to warning status instead of failure
   • Adds Ubuntu Server & Client 22.04 hardening policies to built-in set
   • Adds built-in policies for OpenSSH versions 8.8 through 9.3
   • Updates generic failure/warning messages with specific cipher algorithm names
   • Increases coverage of known host keys, key exchanges, ciphers, and MACs

   11 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Drops support for Python 3.6
9. v2.5.0 Aug 26, 2021 · release notes

   ssh-audit v2.5.0 adds MD5 fingerprint support, new OpenSSH/kex/MAC policies, and a --debug flag.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.5.0 https://github.com/jtesta/ssh-audit.git
   # already have the repo? check out this version:
   $ git checkout v2.5.0

   • Adds the -d / --debug CLI option for enabling verbose debugging output
   • Adds OpenSSH v8.6 & v8.7 policy support for host key and cipher checks

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The JSON output structure for the fingerprints dictionary has changed to include MD5 hashes; scripts parsing this field must update their logic.
10. v2.4.0 Feb 24, 2021 · release notes

    ssh-audit v2.4.0 adds multi-threaded scanning, hardened policy, and sntrup761x25519 key exchange support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.4.0 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.4.0

    └──▷ USE IT
    Display the manual page on Windows without external dependencies.
    shell copy

    ssh-audit --manual

    Verify that a server supports the new sntrup761x25519 key exchange.
    shell copy

    ssh-audit target.example.com | grep sntrup761x25519-sha512@openssh.com

    • -m / --manual flags to display the built-in manual page on Windows without installing a separate man page package.
    • Supports the new key exchange algorithm sntrup761x25519-sha512@openssh.com.
    • Multi-threaded scanning backend significantly reduces scan time for large target sets.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dropped support for Python 3.5; the tool now requires a newer Python version.
11. v2.3.1 Oct 29, 2020 · release notes

    Adds support for des-cbc@ssh.com cipher and lookup function case-insensitivity in ssh-audit v2.3.1

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.3.1 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.3.1

    └──▷ TRY IT
    Look up algorithm variants regardless of case sensitivity using the updated lookup feature.
    copy

    $ ssh-audit --lookup RSA-SHA2-256

    • Adds des-cbc@ssh.com cipher to supported algorithms
    • --lookup flag now performs case-insensitive algorithm matching

    2 details in Everything

12. v2.3.0 Sep 28, 2020 · release notes

    Adds policy scanning subsystem (-L/-M/-P) and new cipher/MAC/kex lookups (--lookup)

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.3.0 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.3.0

    └──▷ TRY IT
    Check the internal database for details on a specific cipher algorithm
    copy

    $ ssh-audit --lookup AEAD_AES_256_GCM

    • Adds -L/--list-policies, -M/--make-policy, and -P/--policy flags to the CLI for server hardening compliance testing
    • Adds --lookup flag to query the internal algorithm database directly from the command line
    • Upgrades 1024-bit moduli handling from warnings to failures in policy checks

    3 details in Everything

13. v2.2.0 Mar 11, 2020 · release notes

    ssh-audit v2.2.0 adds Windows support and new key exchange, cipher, MAC and host key types

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.2.0 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.2.0

    • Adds Windows build distribution for the CLI tool
    • Adds detection for 10 new host key types including ecdsa-sha2-1.3.132.0.10, x509v3-sign-dss, x509v3-sign-rsa, x509v3-sign-rsa-sha256@ssh.com, x509v3-ssh-dss, x509v3-ssh-rsa, sk-ecdsa-sha2-nistp256-cert-v01@openssh.com, sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519-cert-v01@openssh.com, and sk-ssh-ed25519@openssh.com
    • Adds detection for 18 new key exchanges including diffie-hellman-group14-sha256@ssh.com, diffie-hellman-group15-sha256@ssh.com, diffie-hellman-group15-sha384@ssh.com, diffie-hellman-group16-sha384@ssh.com, diffie-hellman-group16-sha512@ssh.com, diffie-hellman-group18-sha512@ssh.com, ecdh-sha2-curve25519, ecdh-sha2-nistb233, ecdh-sha2-nistb409, ecdh-sha2-nistk163, ecdh-sha2-nistk233, ecdh-sha2-nistk283, ecdh-sha2-nistk409, ecdh-sha2-nistp192, ecdh-sha2-nistp224, ecdh-sha2-nistt571, gss-gex-sha1-, and gss-group1-sha1-
    • Adds detection for 9 new ciphers including camellia128-cbc, camellia128-ctr, camellia192-cbc, camellia192-ctr, camellia256-cbc, camellia256-ctr, aes128-gcm, aes256-gcm, and chacha20-poly1305
    • Adds detection for 2 new MACs: aes128-gcm and aes256-gcm

    +1 more show less

    • Changes default classification of host key type ssh-rsa to weak due to SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications. collision risks

    6 details in Everything

14. v2.1.1 Nov 26, 2019 · release notes

    ssh-audit v2.1.1 adds new host key types and ciphers to client testing support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.1.1 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.1.1

    • Adds rsa-sha2-256-cert-v01@openssh.com and rsa-sha2-512-cert-v01@openssh.com host key types.
    • Adds des and 3des ciphers for client testing.

    2 details in Everything

15. v2.1.0 Nov 14, 2019 · release notes

    ssh-audit v2.1.0 adds client auditing (-c) and JSON output (-j)

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.1.0 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.1.0

    └──▷ USE IT
    Audit the SSH protocol versions accepted by a local client binary.
    shell copy

    ssh-audit -c /usr/bin/ssh

    Run a standard audit and output results in machine-readable JSON format for CI integration.
    shell copy

    ssh-audit -j example.com:22

    • Adds -c / --client-audit flag to audit protocols accepted by SSH client software
    • Adds -j / --json flag for JSON-formatted scan results
    • Adds support for 9 new key exchanges including curve448-sha512
    • Adds support for 1 new host key type: ecdsa-sha2-1.3.132.0.10
    • Adds support for 4 new ciphers: idea-cbc, serpent128-cbc, serpent192-cbc, serpent256-cbc

    +1 more show less

    • Adds support for 6 new MACs including hmac-ripemd and umac-96@openssh.com

    6 details in Everything

16. v2.0.0 Aug 29, 2019 · release notes

    First release since 2021 with new crypto tests, KEX/enc/MAC coverage, fingerprint output, and --timeout flag.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.0 https://github.com/jtesta/ssh-audit.git
    # already have the repo? check out this version:
    $ git checkout v2.0.0

    • ssh-audit is now an independent fork of arthepsy/ssh-audit.
    • Adds RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. host key length test capability.
    • Adds RSA certificate key length test capability.
    • Adds Diffie-Hellman modulus size test capability.
    • New output format: host key fingerprints for RSA and ED25519 keys are included in the report.

    +4 more show less

    • Supports 5 new key exchanges: sntrup4591761x25519-sha512@tinyssh.org, diffie-hellman-group-exchange-sha256@ssh.com, diffie-hellman-group-exchange-sha512@ssh.com, diffie-hellman-group16-sha256, diffie-hellman-group17-sha512.
    • Supports 3 new encryption algorithms: des-cbc-ssh1, blowfish-ctr, twofish-ctr.
    • Supports 10 new MACs: hmac-sha2-56, hmac-sha2-224, hmac-sha2-384, hmac-sha3-256, hmac-sha3-384, hmac-sha3-512, hmac-sha256, hmac-sha256@ssh.com, hmac-sha512, hmac-512@ssh.com.
    • Adds -t / --timeout CLI argument for connection and reading timeouts.

    9 details in Everything