OpenSSH Embraces Post-Quantum Cryptography: Future-Proofing SSH Security

OpenSSH 10.0 now defaults to post-quantum key exchange algorithms (mlkem768x25519-sha256) to protect against future attacks from quantum computers. The article explains the potential risk quantum computing poses to existing cryptography, particularly the "store now, decrypt later" attack. OpenSSH mitigates this risk by using hybrid algorithms combining post-quantum and classical methods, ensuring security even if future cryptanalysis breaks the post-quantum component. OpenSSH 10.1 will warn users about non-post-quantum key exchange schemes, encouraging upgrades to stronger algorithms.