- private key format has been udpated and now uses Argon2 - new algorithms; Curve448 kex, Ed448 pub keys, SHA-2 RSA variants - pageant permits loading an encrypted private key and only giving the passphrase later when it's used https://lists.tartarus.org/pipermail/putty-announce/2021/000031.html