Synopsis
The remote SSH server is configured to enable SHA-1 HMAC algorithms.Description
The remote SSH server is configured to enable SHA-1 HMAC algorithms.
Although NIST has formally deprecated use of SHA-1 for digital signatures, SHA-1 is still considered secure for HMAC as the security of HMAC does not rely on the underlying hash function being resistant to collisions.
Note that this plugin only checks for the options of the remote SSH server.
See Also
HMAC and Key Derivation | Practical Cryptography for DevelopersSecure Hash Algorithms | Brilliant Math & Science WikiSHA-1 signed content to be retired - Microsoft LifecycleHMACSHA256 Class (System.Security.Cryptography)Plugin Details
Severity: Info
ID: 153588
File Name: ssh_sha1_hmac_enabled.nasl
Version: 1.2
Type: remote
Family: Misc.
Published: 9/23/2021
Updated: 4/5/2022
Supported Sensors: Nessus
