Component: ssh

7.21 Stable 2026-Jan-12 (1 month ago)

• added support for ED25519-SK keys;
• improved logging of failed login attempts;
• refactored SSH service internal processes;
• renamed User SSH keys "key-owner" field to "info";
• replaced "always-allow-password-login" with "password-authentication" in SSH settings;

7.20.3 Stable 2025-Oct-28 (4 months ago)

• fixed non-interactive command execution (introduced in v7.20);

7.20 Stable 2025-Sep-29 (5 months ago)

• improved stability on busy server;
• show user public key fingerprint under /user/ssh-keys;

7.19 Stable 2025-May-22 (9 months ago)

• fixed authorization with SSH key when multiple user SSH public keys are imported;

7.18 Stable 2025-Feb-24 (1 year ago)

• improved channel resumption after rekey and eof handling;

7.17 Stable 2025-Jan-16 (1 year ago)

• added option to configure SSH ciphers (replaced allow-none-crypto parameter);
• do not regenerate host key after update from RouterOS version older than 7.9;
• improved logging;
• improved speed;
• prefer GCM ciphers for arm64 and x86 devices when ciphers=auto;

7.16 Stable 2024-Sep-20 (1 year ago)

• fixed SSH cryptographic accelerator selection for GCM cipher (introduced in v7.14);
• fixed unsupported user SSH public key import (introduced in v7.15);
• improved system stability when SSH tries to bind to non-existing interface;

7.15.3 Stable 2024-Jul-24 (1 year ago)

• fixed unsupported user SSH public key import (introduced in v7.15);

7.15.2 Stable 2024-Jun-26 (1 year ago)

• fixed SSH cryptographic accelerator selection (introduced in v7.14);

7.15 Stable 2024-May-29 (1 year ago)

• added support for user Ed25519 private keys;
• export host Ed25519 public key;
• fixed bogus output;
• fixed permissions to run ".auto.rsc" scripts;
• require "policy" user policy when adding public key;

7.14.2 Stable 2024-Mar-27 (1 year ago)

• require "policy" user policy when adding public key;

7.14 Stable 2024-Feb-29 (2 years ago)

• improved SSH performance on ARM, MIPS, MMIPS, SMIPS and TILE devices;
• refactored SSH service internal processes;

7.13 Stable 2023-Dec-14 (2 years ago)

• added cipher and hash function acceleration for ARM64 and x86 architectures;
• fix error that caused large chunks of text not being pasted in their entirety into console;

7.12 Stable 2023-Nov-09 (2 years ago)

• added support for user ed25519 public keys;
• allow to specify key owner on import;
• fixed SSH tunnel performance (introduced in v7.10);
• improved connection stability when pasting large chunks of text into console;

7.11 Stable 2023-Aug-15 (2 years ago)

• fixed host public key export (introduced in v7.9);
• fixed private key import (introduced in v7.9);
• fixed SSH key agreement on the client side when ed25519 used under server settings;
• fixed user RSA private key import;

7.10 Stable 2023-Jun-15 (2 years ago)

• added inline key "passphrase" property;
• fixed RouterOS SSH client login when using a key (introduced in v7.9);

7.9 Stable 2023-May-02 (2 years ago)

• added Ed25519 host key support;
• added support for Ed25519 key export and import in PKCS8 format;
• do not allow SHA1 usage with strong crypto enabled;
• improved service responsiveness when changing SSH service settings;
• improved SSH key import process;

7.8 Stable 2023-Feb-24 (3 years ago)

• hard-coded "localhost" address for forwarding requests;
• improved system stability when processing none-crypto SSH connection;

7.7 Stable 2023-Jan-12 (3 years ago)

• added support for Ed25519 key exchange;
• do not allow SHA1 usage with strong crypto enabled;
• fixed handling of non standard size RSA keys;

7.6 Stable 2022-Oct-17 (3 years ago)

• increased key generation timeout;

7.5 Stable 2022-Aug-30 (3 years ago)

• added AES support for PEM decryption;
• fixed importing of public keys;
• fixed minor typo issue when importing public key;

7.4 Stable 2022-Jul-19 (3 years ago)

• disable ssh-rsa when strong-crypto=yes and use rsa-sha2-sha256;
• fixed host key generation (introduced in v7.3);
• implemented "server-sig-algs" extension in order to improve rsa-sha2-sha256 support;

7.3 Stable 2022-Jun-06 (3 years ago)

• added AES-GCM cipher support;
• fail non-interactive client after first invalid password;
• fixed corrupt host key automatic regeneration;
• fixed private key usage after downgrade;
• removed DSA public key authentication support;

7.2 Stable 2022-Mar-31 (3 years ago)

• fixed forwarding with IPv6 link-local addresses;

6.49 Stable 2021-Oct-06 (4 years ago)

• fixed "undo" functionality;