2.1 Supported Algorithms for Remote SFTP in 12.2.1.3

To support the latest algorithms for remote SFTP server in 12.2.1.3, first apply MLR 28258008 (Merge Request on top of 12.2.1.3.0 for Bugs 27446299, 28100096, 28182619, 28212991) and then apply bug 27787163 (Support for hmac-sha2-256 in MFT CS environment).

Latest Supported Remote SFTP Algorithms

KeyExchangeAlgorithm
  • diffie-hellman-group-exchange-sha1
  • diffie-hellman-group14-sha1
  • diffie-hellman-group-exchange-sha256
  • ecdh-sha2-nistp521
  • ecdh-sha2-nistp384
  • ecdh-sha2-nistp256
  • diffie-hellman-group1-sha1 <deprecated>
CompressionAlgorithm
  • none
  • zlib
  • zlib@openssh.com

DataIntegrityAlgorithm (MAC)

  • hmac-sha1
  • hmac-sha256
  • hmac-sha256@ssh.com
  • hmac-sha2-512
  • hmac-sha2-512-etm@openssh.com
  • hmac-sha2-512-96
  • hmac-sha2-256-96
  • hmac-sha2-256-etm@openssh.com
  • hmac-sha2-256
  • hmac-ripemd160
  • hmac-ripemd160-etm@openssh.com
  • hmac-sha1-96
  • hmac-sha1-etm@openssh.com
  • hmac-md5 <deprecated>

PKIAlgorithm

  • ssh-rsa
  • x509v3-sign-rsa
  • x509v3-sign-rsa-sha1
  • ecdsa-sha2-nistp521
  • ecdsa-sha2-nistp384
  • ecdsa-sha2-nistp256
  • ssh-dss <deprecated>

CipherSuite

  • aes128-cbc
  • aes128-ctr
  • 3des-cbc
  • 3des-ctr
  • aes256-cbc
  • aes256-ctr
  • aes192-cbc
  • aes192-ctr
  • twofish192-cbc <deprecated>
  • cast128-cbc <deprecated>
  • twofish256-cbc <deprecated>
  • twofish128-cbc <deprecated>