Supported SSH Ciphers for Thru SFTP External Servers
Encryption Methods
Supports the following encryption methods:
aes128-ctr
aes192-ctr
aes256-ctr
aes128-cbc
aes192-cbc
aes256-cbc
3des-cbc
Key Exchange Methods
Supports the following key exchange methods:
curve25519-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group-exchange-sha1
diffie-hellman-group16-sha512
diffie-hellman-group14-sha256
diffie-hellman-group14-sha1
diffie-hellman-group1-sha1
Public Key Authentication
Supports the following private key formats:
RSA in
OpenSSL traditional PEM format ("BEGIN RSA PRIVATE KEY")
OpenSSL PKCS#8 PEM format ("BEGIN PRIVATE KEY", "BEGIN ENCRYPTED PRIVATE KEY")
http://ssh.com format ("BEGIN SSH2 ENCRYPTED PRIVATE KEY")
OpenSSH key format ("BEGIN OPENSSH PRIVATE KEY")
DSA in
OpenSSL traditional PEM format ("BEGIN DSA PRIVATE KEY")
OpenSSL PKCS#8 PEM format ("BEGIN PRIVATE KEY", "BEGIN ENCRYPTED PRIVATE KEY")
http://ssh.com format ("BEGIN SSH2 ENCRYPTED PRIVATE KEY")
ECDSA 256/384/521 in
OpenSSL traditional PEM format ("BEGIN EC PRIVATE KEY")
OpenSSL PKCS#8 PEM format ("BEGIN PRIVATE KEY", "BEGIN ENCRYPTED PRIVATE KEY")
OpenSSH key format ("BEGIN OPENSSH PRIVATE KEY")
ED25519 in
OpenSSL PKCS#8 PEM format ("BEGIN PRIVATE KEY", "BEGIN ENCRYPTED PRIVATE KEY")
OpenSSH key format ("BEGIN OPENSSH PRIVATE KEY")
Private keys in OpenSSL traditional PEM format can be encrypted using one of the following cipher methods:
DES-EDE3-CBC
DES-EDE3-CFB
DES-CBC
AES-128-CBC
AES-192-CBC
AES-256-CBC
Private keys in OpenSSL PKCS#8 PEM format can be encrypted using any cipher method BouncyCastle supports.
Private keys in http://ssh.com format can be encrypted using one of the following cipher methods:
3des-cbc
Private keys in OpenSSH key format can be encrypted using one of the following cipher methods:
3des-cbc
aes128-cbc
aes192-cbc
aes256-cbc
aes128-ctr
aes192-ctr
aes256-ctr
Host Key Algorithms
Supports the following host key algorithms:
ssh-ed25519
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
rsa-sha2-512
rsa-sha2-256
ssh-rsa
ssh-dss
Message Authentication Code
Supports the following MAC algorithms:
hmac-sha2-256
hmac-sha2-512
hmac-sha1
Compression
Supports the following compression algorithms:
none (default)