SSH

Key-Exchange Algorithms

Table F.3. Default KEXs (in order of client-side preference)

Name in XMLName in GUIFIPS
mlkem1024nistp384-sha384PQC: mlkem1024nistp384-sha384•
mlkem768nistp256-sha256PQC: mlkem768nistp256-sha256•
mlkem768x25519-sha256PQC: mlkem768x25519-sha256•
ecdh-nistp521-kyber1024-sha512@ssh.comPQC: ecdh-nistp521-kyber1024-sha512 (Tectia)•
curve25519-frodokem1344-sha512@ssh.comPQC: curve25519-frodokem1344-sha512 (Tectia)•
sntrup761x25519-sha512@openssh.comPQC: sntrup761x25519-sha512 (OpenSSH)•
diffie-hellman-group-exchange-sha256DH-GEX-SHA256 
diffie-hellman-group16-sha512DH-Group16-SHA512•
diffie-hellman-group18-sha512DH-Group18-SHA512•
diffie-hellman-group14-sha256DH-Group14-SHA256•
diffie-hellman-group14-sha256@ssh.comDH-Group14-SHA256 (Tectia)•
curve25519-sha256Curve25519-sha256•
curve25519-sha256@libssh.orgCurve25519-sha256 (libssh)•

Table F.4. All supported KEXs

Name in XMLName in GUIFIPS
curve25519-frodokem1344-sha512@ssh.comPQC: curve25519-frodokem1344-sha512 (Tectia)•
curve25519-sha256Curve25519-sha256•
curve25519-sha256@libssh.orgCurve25519-sha256 (libssh)•
curve448-kyber1024-sha512@ssh.comPQC: curve448-kyber1024-sha512 (Tectia)•
diffie-hellman-group14-sha1DH-Group14-SHA1•
diffie-hellman-group14-sha224@ssh.comDH-Group14-SHA224 (Tectia)•
diffie-hellman-group14-sha256DH-Group14-SHA256•
diffie-hellman-group14-sha256@ssh.comDH-Group14-SHA256 (Tectia)•
diffie-hellman-group15-sha256@ssh.comDH-Group15-SHA256 (Tectia)•
diffie-hellman-group15-sha384@ssh.comDH-Group15-SHA384 (Tectia)•
diffie-hellman-group16-sha384@ssh.comDH-Group16-SHA384 (Tectia)•
diffie-hellman-group16-sha512DH-Group16-SHA512•
diffie-hellman-group16-sha512@ssh.comDH-Group16-SHA512 (Tectia)•
diffie-hellman-group18-sha512DH-Group18-SHA512•
diffie-hellman-group18-sha512@ssh.comDH-Group18-SHA512 (Tectia)•
diffie-hellman-group1-sha1DH-Group1-SHA1 
diffie-hellman-group-exchange-sha1DH-GEX-SHA1 
diffie-hellman-group-exchange-sha224@ssh.comDH-GEX-SHA224 (Tectia) 
diffie-hellman-group-exchange-sha256DH-GEX-SHA256 
diffie-hellman-group-exchange-sha384@ssh.comDH-GEX-SHA384 (Tectia) 
diffie-hellman-group-exchange-sha512@ssh.comDH-GEX-SHA512 (Tectia) 
ecdh-nistp521-kyber1024-sha512@ssh.comPQC: ecdh-nistp521-kyber1024-sha512 (Tectia)•
ecdh-sha2-nistp256ECDH-NISTP256•
ecdh-sha2-nistp384ECDH-NISTP384•
ecdh-sha2-nistp521ECDH-NISTP521•
mlkem1024nistp384-sha384PQC: mlkem1024nistp384-sha384•
mlkem768nistp256-sha256PQC: mlkem768nistp256-sha256•
mlkem768x25519-sha256PQC: mlkem768x25519-sha256•
sntrup761x25519-sha512@openssh.comPQC: sntrup761x25519-sha512 (OpenSSH)•