comparison xml/510connectbot.in @ 358:37f4a3b506d9

move nist ec curves to lower priority
author Carl Byington <carl@five-ten-sg.com>
date Sun, 03 Aug 2014 11:16:40 -0700
parents b40bc65fa09a
children 395a16681ae1
comparison
equal deleted inserted replaced
357:46c2115ae1c8 358:37f4a3b506d9
78 devices, those keys should be discarded, and you should generate 78 devices, those keys should be discarded, and you should generate
79 new keys. 79 new keys.
80 </para></listitem> 80 </para></listitem>
81 81
82 <listitem><para> 82 <listitem><para>
83 The underlying ssh code has been updated from trilead to 83 The underlying compression code from jcraft has
84 ganymed. Elliptic curve crypto is now supported. 84 been updated. The underlying socks proxy code has
85 been updated. The underlying ssh code has been
86 updated from trilead to ganymed. Elliptic curve
87 crypto is now supported, but the NIST curves are
88 placed after the RSA and DH types in the list of
89 key exchange algorithms, so they should only be
90 used if the server does not support RSA or
91 DH. This change is based on on a general lack of
92 trust in NIST curves that have possibly been
93 compromised by NSA.
85 </para></listitem> 94 </para></listitem>
86 95
87 <listitem><para> 96 <listitem><para>
88 The soft function keypad now has better labels, and can generate 97 The soft function keypad now has better labels, and can generate
89 all 24 function keys for 5250 emulation. A hardware button can 98 all 24 function keys for 5250 emulation. A hardware button can