Several programs have new default behaviour: lshd enables X11 forwarding by default (lsh still does not). lsh-keygen generates RSA rather than DSA keys by default. lsh-writekey encrypts the private key by default, using aes256-cbc (unless the --server flag is used). The lcp script has been improved, and it is now installed by default. The client side of "keyboard-interactive" user authentication has been implemented. Key exchange with diffie-hellman-group14-sha1 is supported. There are fixes to the UTF-8 encoder, and in particular interactions between UTF-8 and control character filtering.
