Files
deploy_home/ansible/roles/common/templates/sshd-pq-kex.conf.j2
2025-12-19 10:39:56 -05:00

10 lines
570 B
Django/Jinja

# Post-Quantum Key Exchange Algorithm
# Managed by Ansible - do not edit directly
#
# Enables sntrup761x25519-sha512 (hybrid post-quantum + classical)
# to protect against "store now, decrypt later" attacks
#
# This must be included BEFORE crypto-policies (40-redhat-crypto-policies.conf)
KexAlgorithms sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512