ssh: raise the RSA modulus limit to 16384 bits the fix for CVE-2026-39829 capped the accepted RSA modulus at 8192 bits, matching crypto/tls, to bound the CPU cost of verifying an attacker-supplied key. That rejected keys OpenSSH generates: ssh-keygen allows -b up to 16384. Raise the limit to 16384 so those keys interoperate, both in the public key parser and the OpenSSH private key parser, and correspondingly raise the prime-factor bound to 8192 bits (each prime is about half the modulus). The agent's checkRSAKeyParams is updated to match. Verifying a 16384-bit key costs roughly 3x an 8192-bit one. Fixes golang/go#80075 Change-Id: Ib08ddd7b48552e692c48dbdf105bbc8579120bbc Reviewed-on: https://go-review.googlesource.com/c/crypto/+/795421 LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Junyang Shao <shaojunyang@google.com> Reviewed-by: Filippo Valsorda <filippo@golang.org> Reviewed-by: David Chase <drchase@google.com>
This repository holds supplementary Go cryptography packages.
This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute.
The git repository is https://go.googlesource.com/crypto.
The main issue tracker for the crypto repository is located at https://go.dev/issues. Prefix your issue with “x/crypto:” in the subject line, so it is easy to find.
Note that contributions to the cryptography package receive additional scrutiny due to their sensitive nature. Patches may take longer than normal to receive feedback.