Skip to main content

Which algorithms are supported for SFTP?

When publishing to an SFTP server, Cascade CMS supports the algorithms below. Those marked with an asterisk are considered weak and are typically disabled by default.

KEX algorithms

  • curve25519-sha256
  • curve25519-sha256@libssh.org
  • diffie-hellman-group16-sha512
  • diffie-hellman-group18-sha512
  • diffie-hellman-group14-sha256
  • ext-info-c
  • kex-strict-c-v00@openssh.com
  • diffie-hellman-group-exchange-sha1 *
  • diffie-hellman-group1-sha1 *
  • diffie-hellman-group14-sha1 *
  • diffie-hellman-group-exchange-sha256 *
  • ecdh-sha2-nistp256 *
  • ecdh-sha2-nistp384 *
  • ecdh-sha2-nistp521 *

Host key algorithms

  • ssh-ed25519
  • rsa-sha2-512
  • rsa-sha2-256
  • ssh-rsa *
  • ssh-dss *
  • ecdsa-sha2-nistp256 *
  • ecdsa-sha2-nistp384 *
  • ecdsa-sha2-nistp521 *

Ciphers

  • aes128-gcm@openssh.com
  • aes256-gcm@openssh.com
  • blowfish-cbc *
  • 3des-cbc *
  • aes128-cbc *
  • aes192-cbc *
  • aes256-cbc *
  • 3des-ctr *
  • aes128-ctr *
  • aes192-ctr *
  • aes256-ctc *
  • arcfour *
  • arcfour128 *
  • arcfour256 *

MACs

  • hmac-sha2-256-etm@openssh.com
  • hmac-sha2-512-etm@openssh.com
  • hmac-sha1-etm@openssh.com
  • hmac-sha2-256
  • hmac-sha2-512
  • hmac-sha1
  • hmac-md5 *
  • hmac-md5-96 *

See Transports for configuring the SFTP connection itself.