Supported SSH Ciphers for Thru SFTP Server
SSH2 Algorithm Enumeration
Key Exchange Algorithms (KEX) [7 total]
diffie-hellman-group14-sha1
diffie-hellman-group1-sha1
diffie-hellman-group-exchange-sha256
diffie-hellman-group-exchange-sha1
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
Server Host Key Algorithms [1 total]
ssh-rsa
Encryption Algorithms [13 total]
Counter Mode (CTR) Ciphers
aes256-ctr
aes192-ctr
aes128-ctr
3des-ctr
Cipher Block Chaining (CBC) Ciphers
aes256-cbc
aes192-cbc
aes128-cbc
3des-cbc
blowfish-cbc
cast128-cbc
Stream Ciphers
arcfour256
arcfour128
arcfour
Message Authentication Code (MAC) Algorithms [10 total]
SHA-1 Based
hmac-sha1
hmac-sha1-96
MD5 Based
hmac-md5
hmac-md5-96
SHA-2 Based
hmac-sha2-256
hmac-sha2-512
hmac-sha2-256-96
hmac-sha2-512-96
RIPEMD Based
hmac-ripemd160
hmac-ripemd160-96
Compression Algorithms [1 total]
none
(No compression)
Security Recommendations
Prefer newer key exchange and MAC algorithms with SHA-2 variants
Avoid older algorithms like SHA-1 and MD5 when possible
Use AES-CTR or AES-CBC modes with 256-bit keys for enhanced security
Disable weak ciphers like arcfour and 3des if not required by legacy systems
Note
Actual supported algorithms may vary based on specific server configuration and security policy.