upstream: prefer AES-GCM to AES-CTR; ok deraadt markus

OpenBSD-Commit-ID: 8366a72e0f300ee31c5dab2c95025387ec15bbc9
openssh · Dec 2, 2024 · d75837b · d75837b
1 parent e19cd49
commit d75837b
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/myproposal.h b/myproposal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: myproposal.h,v 1.75 2024/10/25 01:34:18 djm Exp $ */
+/* $OpenBSD: myproposal.h,v 1.76 2024/12/02 13:37:18 djm Exp $ */
 
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
@@ -60,8 +60,8 @@
 
 #define	KEX_SERVER_ENCRYPT \
 	"[email protected]," \
-	"aes128-ctr,aes192-ctr,aes256-ctr," \
-	"aes128-[email protected],aes256-[email protected]"
+	"aes128-[email protected],aes256-[email protected],"
+	"aes128-ctr,aes192-ctr,aes256-ctr" \
 
 #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT