diff -up openssh-8.7p1/ssh_config.5.crypto-policies openssh-8.7p1/ssh_config.5

--- openssh-8.7p1/ssh_config.5.crypto-policies	2021-08-30 13:29:00.174292872 +0200

+++ openssh-8.7p1/ssh_config.5	2021-08-30 13:31:32.009548808 +0200

@@ -373,17 +373,13 @@ or

 .Qq *.c.example.com

 domains.

 .It Cm CASignatureAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies which algorithms are allowed for signing of certificates

 by certificate authorities (CAs).

-The default is:

-.Bd -literal -offset indent

-ssh-ed25519,ecdsa-sha2-nistp256,

-ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,

-sk-ssh-ed25519@openssh.com,

-sk-ecdsa-sha2-nistp256@openssh.com,

-rsa-sha2-512,rsa-sha2-256

-.Ed

-.Pp

 If the specified list begins with a

 .Sq +

 character, then the specified algorithms will be appended to the default set

@@ -445,20 +441,25 @@ If the option is set to

 (the default),

 the check will not be executed.

 .It Cm Ciphers

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the ciphers allowed and their order of preference.

 Multiple ciphers must be comma-separated.

 If the specified list begins with a

 .Sq +

-character, then the specified ciphers will be appended to the default set

-instead of replacing them.

+character, then the specified ciphers will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified ciphers (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified ciphers will be placed at the head of the

-default set.

+built-in openssh default set.

 .Pp

 The supported ciphers are:

 .Bd -literal -offset indent

@@ -474,13 +475,6 @@ aes256-gcm@openssh.com

 chacha20-poly1305@openssh.com

 .Ed

 .Pp

-The default is:

-.Bd -literal -offset indent

-chacha20-poly1305@openssh.com,

-aes128-ctr,aes192-ctr,aes256-ctr,

-aes128-gcm@openssh.com,aes256-gcm@openssh.com

-.Ed

-.Pp

 The list of available ciphers may also be obtained using

 .Qq ssh -Q cipher .

 .It Cm ClearAllForwardings

@@ -874,6 +868,11 @@ command line will be passed untouched to

 The default is

 .Dq no .

 .It Cm GSSAPIKexAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 The list of key exchange algorithms that are offered for GSSAPI

 key exchange. Possible values are

 .Bd -literal -offset 3n

@@ -886,10 +885,8 @@ gss-nistp256-sha256-,

 gss-curve25519-sha256-

 .Ed

 .Pp

-The default is

-.Dq gss-group14-sha256-,gss-group16-sha512-,gss-nistp256-sha256-,

-gss-curve25519-sha256-,gss-group14-sha1-,gss-gex-sha1- .

 This option only applies to connections using GSSAPI.

+.Pp

 .It Cm HashKnownHosts

 Indicates that

 .Xr ssh 1

@@ -1219,29 +1216,25 @@ it may be zero or more of:

 and

 .Cm pam .

 .It Cm KexAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the available KEX (Key Exchange) algorithms.

 Multiple algorithms must be comma-separated.

 If the specified list begins with a

 .Sq +

-character, then the specified methods will be appended to the default set

-instead of replacing them.

+character, then the specified methods will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified methods (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified methods will be placed at the head of the

-default set.

-The default is:

-.Bd -literal -offset indent

-curve25519-sha256,curve25519-sha256@libssh.org,

-ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,

-diffie-hellman-group-exchange-sha256,

-diffie-hellman-group16-sha512,

-diffie-hellman-group18-sha512,

-diffie-hellman-group14-sha256

-.Ed

+built-in openssh default set.

 .Pp

 The list of available key exchange algorithms may also be obtained using

 .Qq ssh -Q kex .

@@ -1351,37 +1344,33 @@ function, and all code in the

 file.

 This option is intended for debugging and no overrides are enabled by default.

 .It Cm MACs

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the MAC (message authentication code) algorithms

 in order of preference.

 The MAC algorithm is used for data integrity protection.

 Multiple algorithms must be comma-separated.

 If the specified list begins with a

 .Sq +

-character, then the specified algorithms will be appended to the default set

-instead of replacing them.

+character, then the specified algorithms will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified algorithms (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified algorithms will be placed at the head of the

-default set.

+built-in openssh default set.

 .Pp

 The algorithms that contain

 .Qq -etm

 calculate the MAC after encryption (encrypt-then-mac).

 These are considered safer and their use recommended.

 .Pp

-The default is:

-.Bd -literal -offset indent

-umac-64-etm@openssh.com,umac-128-etm@openssh.com,

-hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,

-hmac-sha1-etm@openssh.com,

-umac-64@openssh.com,umac-128@openssh.com,

-hmac-sha2-256,hmac-sha2-512,hmac-sha1

-.Ed

-.Pp

 The list of available MAC algorithms may also be obtained using

 .Qq ssh -Q mac .

 .It Cm NoHostAuthenticationForLocalhost

@@ -1553,37 +1542,25 @@ instead of continuing to execute and pas

 The default is

 .Cm no .

 .It Cm PubkeyAcceptedAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the signature algorithms that will be used for public key

 authentication as a comma-separated list of patterns.

 If the specified list begins with a

 .Sq +

-character, then the algorithms after it will be appended to the default

-instead of replacing it.

+character, then the algorithms after it will be appended to the built-in

+openssh default instead of replacing it.

 If the specified list begins with a

 .Sq -

 character, then the specified algorithms (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified algorithms will be placed at the head of the

-default set.

-The default for this option is:

-.Bd -literal -offset 3n

-ssh-ed25519-cert-v01@openssh.com,

-ecdsa-sha2-nistp256-cert-v01@openssh.com,

-ecdsa-sha2-nistp384-cert-v01@openssh.com,

-ecdsa-sha2-nistp521-cert-v01@openssh.com,

-sk-ssh-ed25519-cert-v01@openssh.com,

-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,

-rsa-sha2-512-cert-v01@openssh.com,

-rsa-sha2-256-cert-v01@openssh.com,

-ssh-rsa-cert-v01@openssh.com,

-ssh-ed25519,

-ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,

-sk-ssh-ed25519@openssh.com,

-sk-ecdsa-sha2-nistp256@openssh.com,

-rsa-sha2-512,rsa-sha2-256,ssh-rsa

-.Ed

+built-in openssh default set.

 .Pp

 The list of available signature algorithms may also be obtained using

 .Qq ssh -Q PubkeyAcceptedAlgorithms .

diff -up openssh-8.7p1/sshd_config.5.crypto-policies openssh-8.7p1/sshd_config.5

--- openssh-8.7p1/sshd_config.5.crypto-policies	2021-08-30 13:29:00.157292731 +0200

+++ openssh-8.7p1/sshd_config.5	2021-08-30 13:32:16.263918533 +0200

@@ -373,17 +373,13 @@ If the argument is

 then no banner is displayed.

 By default, no banner is displayed.

 .It Cm CASignatureAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies which algorithms are allowed for signing of certificates

 by certificate authorities (CAs).

-The default is:

-.Bd -literal -offset indent

-ssh-ed25519,ecdsa-sha2-nistp256,

-ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,

-sk-ssh-ed25519@openssh.com,

-sk-ecdsa-sha2-nistp256@openssh.com,

-rsa-sha2-512,rsa-sha2-256

-.Ed

-.Pp

 If the specified list begins with a

 .Sq +

 character, then the specified algorithms will be appended to the default set

@@ -450,20 +446,25 @@ The default is

 indicating not to

 .Xr chroot 2 .

 .It Cm Ciphers

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the ciphers allowed.

 Multiple ciphers must be comma-separated.

 If the specified list begins with a

 .Sq +

-character, then the specified ciphers will be appended to the default set

-instead of replacing them.

+character, then the specified ciphers will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified ciphers (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified ciphers will be placed at the head of the

-default set.

+built-in openssh default set.

 .Pp

 The supported ciphers are:

 .Pp

@@ -490,13 +491,6 @@ aes256-gcm@openssh.com

 chacha20-poly1305@openssh.com

 .El

 .Pp

-The default is:

-.Bd -literal -offset indent

-chacha20-poly1305@openssh.com,

-aes128-ctr,aes192-ctr,aes256-ctr,

-aes128-gcm@openssh.com,aes256-gcm@openssh.com

-.Ed

-.Pp

 The list of available ciphers may also be obtained using

 .Qq ssh -Q cipher .

 .It Cm ClientAliveCountMax

@@ -685,21 +679,22 @@ For this to work

 .Cm GSSAPIKeyExchange

 needs to be enabled in the server and also used by the client.

 .It Cm GSSAPIKexAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 The list of key exchange algorithms that are accepted by GSSAPI

 key exchange. Possible values are

 .Bd -literal -offset 3n

-gss-gex-sha1-,

-gss-group1-sha1-,

-gss-group14-sha1-,

-gss-group14-sha256-,

-gss-group16-sha512-,

-gss-nistp256-sha256-,

+gss-gex-sha1-

+gss-group1-sha1-

+gss-group14-sha1-

+gss-group14-sha256-

+gss-group16-sha512-

+gss-nistp256-sha256-

 gss-curve25519-sha256-

 .Ed

-.Pp

-The default is

-.Dq gss-group14-sha256-,gss-group16-sha512-,gss-nistp256-sha256-,

-gss-curve25519-sha256-,gss-group14-sha1-,gss-gex-sha1- .

 This option only applies to connections using GSSAPI.

 .It Cm HostbasedAcceptedAlgorithms

 Specifies the signature algorithms that will be accepted for hostbased

@@ -799,26 +794,13 @@ is specified, the location of the socket

 .Ev SSH_AUTH_SOCK

 environment variable.

 .It Cm HostKeyAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the host key signature algorithms

 that the server offers.

-The default for this option is:

-.Bd -literal -offset 3n

-ssh-ed25519-cert-v01@openssh.com,

-ecdsa-sha2-nistp256-cert-v01@openssh.com,

-ecdsa-sha2-nistp384-cert-v01@openssh.com,

-ecdsa-sha2-nistp521-cert-v01@openssh.com,

-sk-ssh-ed25519-cert-v01@openssh.com,

-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,

-rsa-sha2-512-cert-v01@openssh.com,

-rsa-sha2-256-cert-v01@openssh.com,

-ssh-rsa-cert-v01@openssh.com,

-ssh-ed25519,

-ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,

-sk-ssh-ed25519@openssh.com,

-sk-ecdsa-sha2-nistp256@openssh.com,

-rsa-sha2-512,rsa-sha2-256,ssh-rsa

-.Ed

-.Pp

 The list of available signature algorithms may also be obtained using

 .Qq ssh -Q HostKeyAlgorithms .

 .It Cm IgnoreRhosts

@@ -965,20 +947,25 @@ Specifies whether to look at .k5login fi

 The default is

 .Cm yes .

 .It Cm KexAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the available KEX (Key Exchange) algorithms.

 Multiple algorithms must be comma-separated.

 Alternately if the specified list begins with a

 .Sq +

-character, then the specified methods will be appended to the default set

-instead of replacing them.

+character, then the specified methods will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified methods (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified methods will be placed at the head of the

-default set.

+built-in openssh default set.

 The supported algorithms are:

 .Pp

 .Bl -item -compact -offset indent

@@ -1010,15 +997,6 @@ ecdh-sha2-nistp521

 sntrup761x25519-sha512@openssh.com

 .El

 .Pp

-The default is:

-.Bd -literal -offset indent

-curve25519-sha256,curve25519-sha256@libssh.org,

-ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,

-diffie-hellman-group-exchange-sha256,

-diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,

-diffie-hellman-group14-sha256

-.Ed

-.Pp

 The list of available key exchange algorithms may also be obtained using

 .Qq ssh -Q KexAlgorithms .

 .It Cm ListenAddress

@@ -1104,21 +1082,26 @@ function, and all code in the

 file.

 This option is intended for debugging and no overrides are enabled by default.

 .It Cm MACs

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the available MAC (message authentication code) algorithms.

 The MAC algorithm is used for data integrity protection.

 Multiple algorithms must be comma-separated.

 If the specified list begins with a

 .Sq +

-character, then the specified algorithms will be appended to the default set

-instead of replacing them.

+character, then the specified algorithms will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified algorithms (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified algorithms will be placed at the head of the

-default set.

+built-in openssh default set.

 .Pp

 The algorithms that contain

 .Qq -etm

@@ -1161,15 +1144,6 @@ umac-64-etm@openssh.com

 umac-128-etm@openssh.com

 .El

 .Pp

-The default is:

-.Bd -literal -offset indent

-umac-64-etm@openssh.com,umac-128-etm@openssh.com,

-hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,

-hmac-sha1-etm@openssh.com,

-umac-64@openssh.com,umac-128@openssh.com,

-hmac-sha2-256,hmac-sha2-512,hmac-sha1

-.Ed

-.Pp

 The list of available MAC algorithms may also be obtained using

 .Qq ssh -Q mac .

 .It Cm Match

@@ -1548,37 +1522,25 @@ or equivalent.)

 The default is

 .Cm yes .

 .It Cm PubkeyAcceptedAlgorithms

+The default is handled system-wide by

+.Xr crypto-policies 7 .

+To see the defaults and how to modify this default, see manual page

+.Xr update-crypto-policies 8 .

+.Pp

 Specifies the signature algorithms that will be accepted for public key

 authentication as a list of comma-separated patterns.

 Alternately if the specified list begins with a

 .Sq +

-character, then the specified algorithms will be appended to the default set

-instead of replacing them.

+character, then the specified algorithms will be appended to the built-in

+openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq -

 character, then the specified algorithms (including wildcards) will be removed

-from the default set instead of replacing them.

+from the built-in openssh default set instead of replacing them.

 If the specified list begins with a

 .Sq ^

 character, then the specified algorithms will be placed at the head of the

-default set.

-The default for this option is:

-.Bd -literal -offset 3n

-ssh-ed25519-cert-v01@openssh.com,

-ecdsa-sha2-nistp256-cert-v01@openssh.com,

-ecdsa-sha2-nistp384-cert-v01@openssh.com,

-ecdsa-sha2-nistp521-cert-v01@openssh.com,

-sk-ssh-ed25519-cert-v01@openssh.com,

-sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,

-rsa-sha2-512-cert-v01@openssh.com,

-rsa-sha2-256-cert-v01@openssh.com,

-ssh-rsa-cert-v01@openssh.com,

-ssh-ed25519,

-ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,

-sk-ssh-ed25519@openssh.com,

-sk-ecdsa-sha2-nistp256@openssh.com,

-rsa-sha2-512,rsa-sha2-256,ssh-rsa

-.Ed

+built-in openssh default set.

 .Pp

 The list of available signature algorithms may also be obtained using

 .Qq ssh -Q PubkeyAcceptedAlgorithms .