fix(ssh): offer chacha20-poly1305 cipher

domain/sshAlgorithmList.test.ts

@@ -42,6 +42,11 @@ test("effectiveDefaultAlgorithms (modern) never seeds CBC / arcfour / MD5", () =
   }
 });
 
+test("effectiveDefaultAlgorithms (modern) includes chacha20-poly1305", () => {
+  const result = effectiveDefaultAlgorithms(false);
+  assert.ok(result.cipher.includes("chacha20-poly1305@openssh.com"));
+});
+
 test("effectiveDefaultAlgorithms (legacy) appends sha1 KEX, CBC, and ssh-dss", () => {
   const modern = effectiveDefaultAlgorithms(false);
   const legacy = effectiveDefaultAlgorithms(true);

domain/sshAlgorithmList.ts

@@ -137,6 +137,7 @@ const MODERN_DEFAULT_ALGORITHMS: Readonly<Record<SSHAlgorithmCategory, readonly
     "aes128-ctr",
     "aes192-ctr",
     "aes256-ctr",
+    "chacha20-poly1305@openssh.com",
   ],
   hmac: [
     "hmac-sha2-256-etm@openssh.com",