CCS Supported Algorithms for SSH connection

Products

• Control Compliance Suite
• Control Compliance Suite Standards Database
• Control Compliance Suite Standards Module
• Control Compliance Suite Standards Server

Issue/Introduction

From SCU 2023-2 onwards, CCS uses the LibSSH third-party library for SSH communication, replacing the PuTTY library.

Resolution

Following is the list of algorithms supported in CCS for SSH connection:

Key Exchange Algorithms

diffie-hellman-group-exchange-sha256

diffie-hellman-group14-sha256

diffie-hellman-group16-sha512

diffie-hellman-group18-sha512

curve25519-sha256

[email protected]

ecdh-sha2-nistp256

ecdh-sha2-nistp384

ecdh-sha2-nistp521

diffie-hellman-group1-sha1

diffie-hellman-group14-sha1

diffie-hellman-group-exchange-sha1

MAC

hmac-sha2-256

hmac-sha2-512

[email protected]

[email protected]

macs hmac-sha1

macs [email protected]

HostKey Algorithms

rsa-sha2-256

rsa-sha2-512

ssh-ed25519

ecdsa-sha2-nistp256

ssh-rsa

Cipher/Encryption Algorithms

aes256-ctr

aes192-ctr

aes128-ctr

chacha20-poly1305

[email protected]

[email protected]

aes256-cbc

aes192-cbc

aes128-cbc

3des-cbc