Detections
Analytics

SSH SHA-1 HMAC Algorithms Enabled

info Nessus Plugin ID 153588

Language:

Synopsis

The remote SSH server is configured to enable SHA-1 HMAC algorithms.

Description

The remote SSH server is configured to enable SHA-1 HMAC algorithms.

Although NIST has formally deprecated use of SHA-1 for digital signatures, SHA-1 is still considered secure for HMAC as the security of HMAC does not rely on the underlying hash function being resistant to collisions.

Note that this plugin only checks for the options of the remote SSH server.

Plugin Details

Severity: Info

ID: 153588

File Name: ssh_sha1_hmac_enabled.nasl

Version: 1.2

Type: remote

Family: Misc.

Published: 9/23/2021

Updated: 4/5/2022

Supported Sensors: Nessus