diff --git a/controls/sshd_spec.rb b/controls/sshd_spec.rb
index 5589b2f..793d5f9 100644
--- a/controls/sshd_spec.rb
+++ b/controls/sshd_spec.rb
@@ -33,12 +33,6 @@
 sshd_custom_port = attribute('sshd_custom_port', value: '22', description: 'Sometimes the ssh port is not 22. For instance, in a container as another user, 22 is forbidden')
 sshd_custom_hostkeys_path = attribute('sshd_custom_hostkeys_path', value: '/etc/ssh', description: 'Sometimes ssh host keys must be in a particular path, in a clustered environment for instance')
 
-sshd_valid_privseparation = if sshd_custom_user != 'root'
-                              'no'
-                            else
-                              ssh_crypto.valid_privseparation
-                            end
-
 only_if do
   command('sshd').exist?
 end
@@ -208,9 +202,9 @@
 control 'sshd-16' do
   impact 1.0
   title 'Server: Use privilege separation'
-  desc 'UsePrivilegeSeparation is an option, when enabled will allow the OpenSSH server to run a small (necessary) amount of code as root and the of the code in a chroot jail environment. This enables ssh to deal incoming network traffic in an unprivileged child process to avoid privilege escalation by an attacker.'
+  desc 'UsePrivilegeSeparation is deprecated.'
   describe sshd_config(sshd_custom_path + '/sshd_config') do
-    its('UsePrivilegeSeparation') { should eq(sshd_valid_privseparation) }
+    its('UsePrivilegeSeparation') { should eq nil }
   end
 end
 
diff --git a/libraries/ssh_crypto.rb b/libraries/ssh_crypto.rb
index 0c51fc0..fb7b89c 100644
--- a/libraries/ssh_crypto.rb
+++ b/libraries/ssh_crypto.rb
@@ -182,46 +182,6 @@ def valid_macs # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLen
     macs
   end
 
-  def valid_privseparation # rubocop:disable Metrics/CyclomaticComplexity
-    # define privilege separation set
-    ps53 = 'yes'
-    ps59 = 'sandbox'
-    ps75 = nil
-    ps = ps59
-
-    # debian 7.x and newer has ssh 5.9+
-    # ubuntu 12.04 and newer has ssh 5.9+
-
-    case inspec.os[:name]
-    when 'debian'
-      case inspec.os[:release]
-      when /^6\./
-        ps = ps53
-      when /^10\./
-        ps = ps75
-      end
-    when 'redhat', 'centos', 'oracle'
-      case inspec.os[:release]
-      # redhat/centos/oracle 6.x has ssh 5.3
-      when /^6\./
-        ps = ps53
-      when /^7\./
-        ps = ps59
-      when /^8\./
-        ps = ps75
-      end
-    when 'ubuntu'
-      case inspec.os[:release]
-      when /^18\./, /^20\./
-        ps = ps75
-      end
-    when 'fedora', 'alpine', 'arch'
-      ps = ps75
-    end
-
-    ps
-  end
-
   # return a list of valid algoriths for a current platform
   def valid_algorithms # rubocop:disable Metrics/CyclomaticComplexity
     alg53 = %w[rsa]