Table G.3. Default KEXs (in order of client-side preference)
Name in XML | Name in GUI | FIPS |
---|---|---|
mlkem1024nistp384-sha384 | PQC: mlkem1024nistp384-sha384 | • |
mlkem768nistp256-sha256 | PQC: mlkem768nistp256-sha256 | • |
mlkem768x25519-sha256 | PQC: mlkem768x25519-sha256 | • |
ecdh-nistp521-kyber1024-sha512@ssh.com | PQC: ecdh-nistp521-kyber1024-sha512 (Tectia) | • |
curve25519-frodokem1344-sha512@ssh.com | PQC: curve25519-frodokem1344-sha512 (Tectia) | • |
sntrup761x25519-sha512@openssh.com | PQC: sntrup761x25519-sha512 (OpenSSH) | • |
diffie-hellman-group-exchange-sha256 | DH-GEX-SHA256 | |
diffie-hellman-group16-sha512 | DH-Group16-SHA512 | • |
diffie-hellman-group18-sha512 | DH-Group18-SHA512 | • |
diffie-hellman-group14-sha256 | DH-Group14-SHA256 | • |
diffie-hellman-group14-sha256@ssh.com | DH-Group14-SHA256 (Tectia) | • |
curve25519-sha256 | Curve25519-sha256 | • |
curve25519-sha256@libssh.org | Curve25519-sha256 (libssh) | • |
Table G.4. All supported KEXs
Name in XML | Name in GUI | FIPS |
---|---|---|
curve25519-frodokem1344-sha512@ssh.com | PQC: curve25519-frodokem1344-sha512 (Tectia) | • |
curve25519-sha256 | Curve25519-sha256 | • |
curve25519-sha256@libssh.org | Curve25519-sha256 (libssh) | • |
curve448-kyber1024-sha512@ssh.com | PQC: curve448-kyber1024-sha512 (Tectia) | • |
diffie-hellman-group14-sha1 | DH-Group14-SHA1 | • |
diffie-hellman-group14-sha224@ssh.com | DH-Group14-SHA224 (Tectia) | • |
diffie-hellman-group14-sha256 | DH-Group14-SHA256 | • |
diffie-hellman-group14-sha256@ssh.com | DH-Group14-SHA256 (Tectia) | • |
diffie-hellman-group15-sha256@ssh.com | DH-Group15-SHA256 (Tectia) | • |
diffie-hellman-group15-sha384@ssh.com | DH-Group15-SHA384 (Tectia) | • |
diffie-hellman-group16-sha384@ssh.com | DH-Group16-SHA384 (Tectia) | • |
diffie-hellman-group16-sha512 | DH-Group16-SHA512 | • |
diffie-hellman-group16-sha512@ssh.com | DH-Group16-SHA512 (Tectia) | • |
diffie-hellman-group18-sha512 | DH-Group18-SHA512 | • |
diffie-hellman-group18-sha512@ssh.com | DH-Group18-SHA512 (Tectia) | • |
diffie-hellman-group1-sha1 | DH-Group1-SHA1 | |
diffie-hellman-group-exchange-sha1 | DH-GEX-SHA1 | |
diffie-hellman-group-exchange-sha224@ssh.com | DH-GEX-SHA224 (Tectia) | |
diffie-hellman-group-exchange-sha256 | DH-GEX-SHA256 | |
diffie-hellman-group-exchange-sha384@ssh.com | DH-GEX-SHA384 (Tectia) | |
diffie-hellman-group-exchange-sha512@ssh.com | DH-GEX-SHA512 (Tectia) | |
ecdh-nistp521-kyber1024-sha512@ssh.com | PQC: ecdh-nistp521-kyber1024-sha512 (Tectia) | • |
ecdh-sha2-nistp256 | ECDH-NISTP256 | • |
ecdh-sha2-nistp384 | ECDH-NISTP384 | • |
ecdh-sha2-nistp521 | ECDH-NISTP521 | • |
mlkem1024nistp384-sha384 | PQC: mlkem1024nistp384-sha384 | • |
mlkem768nistp256-sha256 | PQC: mlkem768nistp256-sha256 | • |
mlkem768x25519-sha256 | PQC: mlkem768x25519-sha256 | • |
sntrup761x25519-sha512@openssh.com | PQC: sntrup761x25519-sha512 (OpenSSH) | • |