Terminal emulation improvements - TerminalControl supports east Asian double-width (full width) characters, along with Unicode surrogate pairs. Prompt-detection routine has been improved to support more prompt variants.
ML-KEM support in SSH - Rebex SSH library adds support for post-quantum ML-KEM key encapsulation algorithm. The following hybrid key exchange ciphers are supported: mlkem768nistp256-sha256, mlkem1024nistp384-sha384, mlkem768x25519-sha256. ML-KEM is supported out-of-box on up-to-date PQC-enabled Windows with .NET 3.5 or higher. On other platforms, a PQC plugin is needed.
ML-DSA support in SSH - Rebex SSH library also adds support for post-quantum ML-DSA signature algorithm. This is currently 'experimental', because the protocols have not been finalized yet. However, Rebex libraries with ML-DSA are already perfectly suitable for real-world testing. ML-DSA is supported out-of-box on PQC-enabled Windows with .NET 3.5 or higher, or on up-to-date Linux with .NET 10. On other platforms, a PQC plugin is needed.
FIPS 140-3 mode and cryptography updates - Instead of FIPS 140-2, the UseFipsAlgorithmsOnly setting now enables 'FIPS 140-3 mode', which limits usage of cryptographic algorithms, and forces usage of cryptographic modules to those provided by .NET or the operating system. Also migrated from the legacy CryptoAPI to the new Windows CNG API. Certificate.LoadPfx, CertificateChain.LoadPfx and Certificate.Associate methods now prefer CNG key stores by default instead of legacy CryptoAPI key stores. HKDF key derivation in XtsStream and FileEncryption classes has been updated to support SHA-2 family of hashes.
API updates, changes and deprecations - Version 8.0 of Rebex libraries introduces some breaking changes, either due to abandoning long-deprecating APIs, for security reasons, or to fix compatibility with third-party tools.
Rebex SSH Shell 7.0.96492026年6月1日
功能
Cryptography: Added workaround for uncommon RSA keys with very long exponents.
Cryptography: Now checks public key during any Diffie-Hellman key exchange.
Cryptography: Improved compatibility with Windows CNG keys.
Cryptography: Improved private key handling in CNG interop.
Cryptography: Now uses constant-time-compares where appropriate.
SSH: Improved compatibility of 'SSH2 PUBLIC KEY' file loader.
SSH: Now clears raw SSH_MSG_USERAUTH_REQUEST contents as soon as encrypted.
SSH: Now rejects non-standard public key formats during SSH negotiation.
修复
Cryptography: Fixed .NET 10 detection in .NET Standard binaries.
Cryptography: Fixed Base-64 decoding of PEM files in SignedData/EnvelopedData Load method.
Cryptography: Fixed detection of AES/GCM support in .NET Standard 2.1 on macOS.
Cryptography: Fixed detection of buggy AES CSP in .NET Framework 3.5 on recent Windows.
Cryptography: Fixed handling of RSA/PSS with uncommon salt lengths on recent non-Windows .NET platforms.
Cryptography: Fixed handling of RSA/SHA-224 for CNG-based private keys.
Rebex SSH Shell 7.0.95612026年3月5日
功能
Terminal: Better handling of Unicode surrogate pairs in Terminal.Save method.
修复
Terminal: Fixed TerminalOptions.SelectGraphicRendition1, independent to SGR sequence ordering now.
SSH: Fixed receive buffer space adjustment logic (client side).