OpenSSH 10.4 Released with Experimental Post-Quantum Signature Support
Translated by a model; the original is in Russian.
The OpenSSH developers have unveiled version 10.4, which includes a number of security and bug fixes as well as several notable changes.
Post-quantum signatures
The new release introduces experimental support for a composite post-quantum signature scheme that combines the ML-DSA 44 and Ed25519 algorithms. The implementation is based on the description from the corresponding IETF draft.
Stricter sandbox behavior
The behavior of sshd when working with sandbox mechanisms on Linux has changed. If OpenSSH is built with sandbox support, then starting with version 10.4 the daemon will exit with an error on systems where SECCOMP or NO_NEW_PRIVS is not enabled. Previously, in such a situation sshd would merely write an error message to the log but continue running as normal.
The full list of changes, including the other security and bug fixes, is given in the release notes.
Source: LWN.net
Comments
Sign in, to comment.