SSH

Key-Exchange Algorithms

Table G.3. Default KEXs (in order of client-side preference)

Name in XMLName in GUIFIPS
mlkem1024nistp384-sha384PQC: mlkem1024nistp384-sha384
mlkem768nistp256-sha256PQC: mlkem768nistp256-sha256
mlkem768x25519-sha256PQC: mlkem768x25519-sha256
ecdh-nistp521-kyber1024-sha512@ssh.comPQC: ecdh-nistp521-kyber1024-sha512 (Tectia)
curve25519-frodokem1344-sha512@ssh.comPQC: curve25519-frodokem1344-sha512 (Tectia)
sntrup761x25519-sha512@openssh.comPQC: sntrup761x25519-sha512 (OpenSSH)
diffie-hellman-group-exchange-sha256DH-GEX-SHA256 
diffie-hellman-group16-sha512DH-Group16-SHA512
diffie-hellman-group18-sha512DH-Group18-SHA512
diffie-hellman-group14-sha256DH-Group14-SHA256
diffie-hellman-group14-sha256@ssh.comDH-Group14-SHA256 (Tectia)
curve25519-sha256Curve25519-sha256
curve25519-sha256@libssh.orgCurve25519-sha256 (libssh)

Table G.4. All supported KEXs

Name in XMLName in GUIFIPS
curve25519-frodokem1344-sha512@ssh.comPQC: curve25519-frodokem1344-sha512 (Tectia)
curve25519-sha256Curve25519-sha256
curve25519-sha256@libssh.orgCurve25519-sha256 (libssh)
curve448-kyber1024-sha512@ssh.comPQC: curve448-kyber1024-sha512 (Tectia)
diffie-hellman-group14-sha1DH-Group14-SHA1
diffie-hellman-group14-sha224@ssh.comDH-Group14-SHA224 (Tectia)
diffie-hellman-group14-sha256DH-Group14-SHA256
diffie-hellman-group14-sha256@ssh.comDH-Group14-SHA256 (Tectia)
diffie-hellman-group15-sha256@ssh.comDH-Group15-SHA256 (Tectia)
diffie-hellman-group15-sha384@ssh.comDH-Group15-SHA384 (Tectia)
diffie-hellman-group16-sha384@ssh.comDH-Group16-SHA384 (Tectia)
diffie-hellman-group16-sha512DH-Group16-SHA512
diffie-hellman-group16-sha512@ssh.comDH-Group16-SHA512 (Tectia)
diffie-hellman-group18-sha512DH-Group18-SHA512
diffie-hellman-group18-sha512@ssh.comDH-Group18-SHA512 (Tectia)
diffie-hellman-group1-sha1DH-Group1-SHA1 
diffie-hellman-group-exchange-sha1DH-GEX-SHA1 
diffie-hellman-group-exchange-sha224@ssh.comDH-GEX-SHA224 (Tectia) 
diffie-hellman-group-exchange-sha256DH-GEX-SHA256 
diffie-hellman-group-exchange-sha384@ssh.comDH-GEX-SHA384 (Tectia) 
diffie-hellman-group-exchange-sha512@ssh.comDH-GEX-SHA512 (Tectia) 
ecdh-nistp521-kyber1024-sha512@ssh.comPQC: ecdh-nistp521-kyber1024-sha512 (Tectia)
ecdh-sha2-nistp256ECDH-NISTP256
ecdh-sha2-nistp384ECDH-NISTP384
ecdh-sha2-nistp521ECDH-NISTP521
mlkem1024nistp384-sha384PQC: mlkem1024nistp384-sha384
mlkem768nistp256-sha256PQC: mlkem768nistp256-sha256
mlkem768x25519-sha256PQC: mlkem768x25519-sha256
sntrup761x25519-sha512@openssh.comPQC: sntrup761x25519-sha512 (OpenSSH)