Remove MD5, use SHA256

Author: N2D4

ssh/client/main.go

@@ -57,7 +57,7 @@ func PromptPassword() (secret string, err error) {
 // PromptAcceptHostKey prompts the user to accept or reject the given host key.
 func PromptAcceptHostKey(hostname string, remote net.Addr, publicKey string) bool {
 	for {
-		fmt.Printf("Key fingerprint MD5 is: %s do you recognize it? (y/n) ", publicKey)
+		fmt.Printf("Key fingerprint SHA256 is: %s do you recognize it? (y/n) ", publicKey)
 		var answer string
 		fmt.Scanln(&answer)
 		answer = strings.ToLower(answer)

ssh/client/ssh/ssh.go

@@ -1,7 +1,7 @@
 package ssh
 
 import (
-	"crypto/md5"
+	"crypto/sha256"
 	"fmt"
 	"io"
 	"io/ioutil"
@@ -291,7 +291,7 @@ func (client *Client) verifyHostKey(hostname string, remote net.Addr, key ssh.Pu
 		case *knownhosts.KeyError:
 			if len(e.Want) == 0 {
 				// It's an unknown key, prompt user!
-				hash := md5.New()
+				hash := sha256.New()
 				hash.Write(key.Marshal())
 				if client.promptForForeignKeyConfirmation(hostname, remote, fmt.Sprintf("%x", hash.Sum(nil))) {
 					newLine := knownhosts.Line([]string{remote.String()}, key)