tree eca17b27d15295ff3f988b998ba441aa7cd4acdb
parent 4142f2d949aee711b778f281ca1476ac18fa4389
author Gert van Dijk <gertvdijk@gmail.com> 1508795124 +0200
committer Gert van Dijk <gertvdijk@gmail.com> 1508801569 +0200

Documentation: List all ciphers/MACs available and add some recommendations

Some ciphers were missing (AES-CTR modes, RC4). These were already
available with at least 1.0.0 of Apache MINA SSHD. It's a shame we didn't
list them all; AES-CTR modes are the strongest ones Gerrit can offer!

I've added some recommendations to mitigate at least the worst of the
attacks. I guess we should consider to adapt our defaults to more modern
standards (see Issue 7534).

I did not add recommendations for the MACs section deliberately. Despite
the fact that MD5 and SHA1 are considered broken, HMAC-MD5/HMAC-SHA1 are
not weak in the same way.

Change-Id: Iab6f51ec1d103714283724962f64d4a125ed4aaa