General / How To
Which algorithms are supported for SFTP?
When publishing to an SFTP server, Cascade CMS supports the following algorithms:
KEX algorithms:
curve25519-sha256
curve25519-sha256@libssh.org
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
ext-info-c
kex-strict-c-v00@openssh.com
diffie-hellman-group-exchange-sha1
*diffie-hellman-group1-sha1
*diffie-hellman-group14-sha1
*diffie-hellman-group-exchange-sha256
*ecdh-sha2-nistp256
*ecdh-sha2-nistp384
*ecdh-sha2-nistp521
*
Host key algorithms:
ssh-ed25519
rsa-sha2-512
rsa-sha2-256
ssh-rsa*
*ssh-dss*
*ecdsa-sha2-nistp256
*ecdsa-sha2-nistp384
*ecdsa-sha2-nistp521
*
Ciphers:
aes128-gcm@openssh.com
aes256-gcm@openssh.com
blowfish-cbc
*3des-cbc
*aes128-cbc
*aes192-cbc
*aes256-cbc
*3des-ctr
*aes128-ctr
*aes192-ctr
*aes256-ctc
*arcfour
*arcfour128
*arcfour256
*
MACs:
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-sha1-etm@openssh.com
hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-md5
*hmac-md5-96
*hmac-sha1
*hmac-sha1-96
*
Note: Items denoted with an asterisk (*) above are considered older/insecure algorithms and should only be used for backwards compatibility purposes. Wherever possible, we recommend disabling these on the target web server and instead utilizing the more secure algorithms.