Tech article
Security improvements for SSH
Publisher description: We’re removing several SSH algorithms, adding a new algorithm, and requiring larger RSA SSH keys to improve security.
github | Sep 22, 2026 | Allison
Automated excerpt
We’re removing the ability to use RSA keys using SHA-1 in SSH (i. e. , the ssh-rsa signature type, including ssh-rsa-cert-v01@openssh. com certificates using SHA-1). We’re removing the key exchange mechanism diffie-hellman-group-exchange-sha256. If you’re using an existing RSA key, make sure you’re using RSA with SHA-2 (i. e. , the rsa-sha2-256 and rsa-sha2-512 signature types).
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.