Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 11
- Abstract
- This document describes a widely deployed hybrid key exchange method in the Secure Shell (SSH) protocol that is based on Streamlined NTRU Prime sntrup761 and X25519 with SHA-512.
- Publication Date
- 2026-04-01
- Status Note
- Informational
- DOI
10.17487/RFC9941- Link
- https://doi.org/10.17487/RFC9941
- Author(s)
- Markus FriedlJan MojzisSimon Josefsson
- Keyword(s)
- NTRUPrime, X25519, SSH, Key Exchange, Post-quantum Cryptography, Hybrid Key Exchange
Latest version of IETF RFC 9941
Document Versions — IETF RFC 9941
-
▶ IETF RFC 9941 (2026-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- 10.5281-zenodo.13983972 — NTRUPrimePQCS EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 4251 [Active*]
- IETF RFC 4253 [Active*]
- IETF RFC 5656 [Active*]
- IETF RFC 6234 [Active*]
- IETF RFC 7748 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8731 [Active*]
Bibliographic Reference(s)
- Bernstein, D.J., Chuengsatiansup, C., Lange, T., and C. van Vredendaal, "NTRU Prime: reducing attack surface at low cost", August 2017, <https://ntruprime.cr.yp.to/ntruprime-20170816.pdf>. EXTERNAL
- OpenSSH, "OpenSSH", <https://www.openssh.com/>. EXTERNAL
- IANA, "Key Exchange Method Names", <https://www.iana.org/assignments/ssh-parameters>. EXTERNAL
- NTRU Prime, "NTRU Prime", <https://ntruprime.cr.yp.to/>. EXTERNAL
- TinySSH, "TinySSH", <https://tinyssh.org/>. EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9941.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9941, Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512. Available at https://doi.org/10.17487/RFC9941
Snippet:
IETF RFC 9941, Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512. Available at https://doi.org/10.17487/RFC9941
HTML (ISO 690 compliant)
Preview:
IETF RFC 9941, Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512. Available at https://doi.org/10.17487/RFC9941
Snippet:
<span class="citation"><cite>IETF RFC 9941</cite>, Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512. Available at <a href="https://doi.org/10.17487/RFC9941" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9941</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9941, Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512
doi: 10.17487/RFC9941
url: https://doi.org/10.17487/RFC9941
doi: 10.17487/RFC9941
url: https://doi.org/10.17487/RFC9941
Snippet:
<li> <cite id="bib-rfc9941">IETF RFC 9941</cite>, Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512 <span class="doi">10.17487/RFC9941</span> </li>
Referenced By
- IETF RFC 9958 [Active*]