}

// supportedCiphers lists ciphers we support but might not recommend.
// https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.22.0:ssh/common.go;l=28
var supportedCiphers = []string{
	"aes128-ctr", "aes192-ctr", "aes256-ctr",
	"******@****.***", gcm256CipherID,
	chacha20Poly1305ID,
	"arcfour256", "arcfour128", "arcfour",
	aes128cbcID,
	tripledescbcID,
}

XORKeyStream only } func NewCTR(b *Block, iv []byte) *CTR { // Allocate the CTR here, in an easily inlineable function, so // the allocation can be done in the caller's stack frame // instead of the heap. See issue 70499. c := newCTR(b, iv) return &c } func newCTR(b *Block, iv []byte) CTR { if len(iv) != BlockSize { panic("bad IV length") } return CTR{ b: *b, ivlo: byteorder.BEUint64(iv[8:16]), ivhi: byteorder.BEUint64(iv[0:8]), offset: 0, } } func (c *CTR) XORKeyStream(dst, src []byte) { c.XORKeyStreamAt(dst,...

XORKeyStream only } func NewCTR(b *Block, iv []byte) *CTR { // Allocate the CTR here, in an easily inlineable function, so // the allocation can be done in the caller's stack frame // instead of the heap. See issue 70499. c := newCTR(b, iv) return &c } func newCTR(b *Block, iv []byte) CTR { if len(iv) != BlockSize { panic("bad IV length") } return CTR{ b: *b, ivlo: byteorder.BEUint64(iv[8:16]), ivhi: byteorder.BEUint64(iv[0:8]), offset: 0, } } func (c *CTR) XORKeyStream(dst, src []byte) { c.XORKeyStreamAt(dst,...