Warren e0e145e277 fix(ssh): Re-add uint32 prefix for shared secret K in exchange hash and key derivation ...

OpenSSH sshbuf_put_bignum2_bytes() writes uint32(len) + mpint_data
to the buffer (confirmed from sshbuf-getput-basic.c line 569). Both
kex_gen_hash() via sshbuf_putb() and kex_derive_keys() via
ssh_digest_update_buffer() consume the full buffer including the uint32
prefix.

Fixes 'incorrect signature' error on OpenSSH 10.2.

2026-06-20 15:41:43 +08:00

..

src

fix(ssh): Re-add uint32 prefix for shared secret K in exchange hash and key derivation

2026-06-20 15:41:43 +08:00

Cargo.toml

perf(ssh): Remove ChaCha20-Poly1305 algorithm (AES-GCM already achieves 100 MB/s)

2026-06-19 23:36:47 +08:00