SSH Algorithms

WS_FTP Professional supports a range of key exchange (KEX) algorithms, ciphers, and MACs. The KEX algorithms, ciphers, and MAC algorithms are used to negotiate SSH connections with the remote SSH server.

The encryption algorithm list allows you to choose which encryption algorithms are permissible, and the order of preference. The list is located in the ssh-algos.txt file in the C:\Users\<UserName>\AppData\Roaming\Progress\WS_FTP directory.

Key algorithms:

  • ecdh-sha2-nistp256
  • ecdh-sha2-nistp384
  • ecdh-sha2-nistp521
  • diffie-hellman-group-exchange-sha256
  • diffie-hellman-group-exchange-sha1
  • diffie-hellman-group14-sha1
  • diffie-hellman-group14-sha256
  • diffie-hellman-group1-sha1
  • diffie-hellman-group16-sha512 (12.9.1, and later)
  • diffie-hellman-group18-sha512 (12.9.1, and later)

SSH SHK:

  • rsa-sha2-512
  • rsa-sha2-256
  • ssh-rsa
  • ssh-dss

Ciphers:

  • aes256-ctr
  • aes192-ctr
  • aes128-ctr
  • aes256-cbc
  • 3des-cbc
  • aes192-cbc
  • aes128-cbc
  • blowfish-cbc
  • aes128-gcm@openssh.com (12.9.2, and later)
  • aes256-gcm@openssh.com (12.9.2, and later)

MACs:

  • hmac-sha2-512
  • hmac-sha2-384
  • hmac-sha2-256
  • hmac-sha1
  • hmac-md5
  • hmac-ripemd160

SSH Compression Algorithms:

  • zlib
  • none