File 3051-ssh-move-mlkem768x25519-sha256-to-the-end-of-default.patch of Package erlang
From 5b57961716925f7c7c8f8ef490f85e46629eaa33 Mon Sep 17 00:00:00 2001
From: Jakub Witczak <kuba@erlang.org>
Date: Fri, 6 Feb 2026 15:50:02 +0100
Subject: [PATCH] ssh: move 'mlkem768x25519-sha256' to the end of default list
---
lib/ssh/src/ssh_transport.erl | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lib/ssh/src/ssh_transport.erl b/lib/ssh/src/ssh_transport.erl
index cda0ad97e5..973903369e 100644
--- a/lib/ssh/src/ssh_transport.erl
+++ b/lib/ssh/src/ssh_transport.erl
@@ -210,7 +210,6 @@ supported_algorithms() -> [{K,supported_algorithms(K)} || K <- algo_classes()].
supported_algorithms(kex) ->
select_crypto_supported(
[
- {'mlkem768x25519-sha256', [{kems, mlkem768}, {public_keys,ecdh}, {curves,x25519}, {hashs,sha256}]},
{'curve25519-sha256', [{public_keys,ecdh}, {curves,x25519}, {hashs,sha256}]},
{'curve25519-sha256@libssh.org', [{public_keys,ecdh}, {curves,x25519}, {hashs,sha256}]},
{'curve448-sha512', [{public_keys,ecdh}, {curves,x448}, {hashs,sha512}]},
@@ -223,7 +222,8 @@ supported_algorithms(kex) ->
{'diffie-hellman-group14-sha256', [{public_keys,dh}, {hashs,sha256}]}, % In OpenSSH 7.3.p1
{'diffie-hellman-group14-sha1', [{public_keys,dh}, {hashs,sha}]},
{'diffie-hellman-group-exchange-sha1', [{public_keys,dh}, {hashs,sha}]},
- {'diffie-hellman-group1-sha1', [{public_keys,dh}, {hashs,sha}]}
+ {'diffie-hellman-group1-sha1', [{public_keys,dh}, {hashs,sha}]},
+ {'mlkem768x25519-sha256', [{kems, mlkem768}, {public_keys,ecdh}, {curves,x25519}, {hashs,sha256}]}
]);
supported_algorithms(public_key) ->
select_crypto_supported(
--
2.51.0