ssh-ed25519
******@****.***
sk-ecdsa-sha2******@****.***
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
rsa-sha2-256
rsa-sha2-512
ssh-rsa
ssh-dss
```

`--sftp=kex-algos=...` specifies the supported key-exchange algorithms in preference order.

Valid values: 

```
curve25519-sha256
******@****.***
ecdh-sha2-nistp256
ecdh-sha2-nistp384

// because they have reached the end of their useful life.
// https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.22.0:ssh/common.go;l=85
var supportedMACs = []string{
	"hmac-sha2******@****.***", "hmac-sha2******@****.***", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1", "hmac-sha1-96",
}

func sshPubKeyAuth(c ssh.ConnMetadata, key ssh.PublicKey) (*ssh.Permissions, error) {
	return authenticateSSHConnection(c, key, nil)
}

	// Some MySQL has a 3072 byte limit on key sizes.
	mysqlCreateNamespaceTable = `CREATE TABLE %s (
             key_name VARCHAR(3072) NOT NULL,
             key_hash CHAR(64) GENERATED ALWAYS AS (SHA2(key_name, 256)) STORED NOT NULL PRIMARY KEY,
             value JSON)
           CHARACTER SET = utf8mb4 COLLATE = utf8mb4_bin ROW_FORMAT = Dynamic;`

that // need access to the unexported symbol testingOnlyRejection. func TestACVPRejectionKAT(t *testing.T) { testCases := []struct { name string seed string // input to ML-DSA.KeyGen_internal keyHash string // SHA2-256(pk || sk) msg string // M' input to ML-DSA.Sign_internal sigHash string // SHA2-256(sig) newPrivateKey func([]byte) (*PrivateKey, error) newPublicKey func([]byte) (*PublicKey, error) }{ // https://pages.nist.gov/ACVP/draft-celi-acvp-ml-dsa.html#table-1 // ML-DSA Algorithm 7 ML-DSA.Sign_internal()...

testHash() drbg := newDRBG(sha512.New, k.d, bits2octets(P256(), hash), nil) sig, err := sign(c, k, drbg, hash) if err != nil { return err } return Verify(c, &k.pub, hash, sig) }) } var fipsSelfTest = sync.OnceFunc(func() { fips140.CAST("ECDSA P-256 SHA2-512 sign and verify", func() error { k := testPrivateKey() Z := []byte{ 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, } persStr := []byte{ 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a,...