···

       
293
       
293
       
 
       
      kexAlgorithms = mkOption {

     

       
294
       
294
       
 
       
        type = types.listOf types.str;

     

       
295
       
295
       
 
       
        default = [

     

       
296
       
296
       
+
       
          "sntrup761x25519-sha512@openssh.com"

     

       
296
       
297
       
 
       
          "curve25519-sha256"

     

       
297
       
298
       
 
       
          "curve25519-sha256@libssh.org"

     

       
298
       
299
       
 
       
          "diffie-hellman-group-exchange-sha256"

     
···

       
301
       
302
       
 
       
          Allowed key exchange algorithms

     

       
302
       
303
       
 
       
          </para>

     

       
303
       
304
       
 
       
          <para>

     

       
304
       
304
       
-
       
          Defaults to recommended settings from both

     

       
305
       
305
       
+
       
          Uses the lower bound recommended in both

     

       
305
       
306
       
 
       
          <link xlink:href="https://stribika.github.io/2015/01/04/secure-secure-shell.html" />

     

       
306
       
307
       
 
       
          and

     

       
307
       
308
       
 
       
          <link xlink:href="https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67" />