Welcome on my blog

Najnowsze zalecane szyfrowania SSH

curve25519-sha256@libssh.org,
ecdh-sha2-nistp521,
ecdh-sha2-nistp384,
ecdh-sha2-nistp256,
diffie-hellman-group-exchange-sha256,
diffie-hellman-group14-sha1

Edytowanie Pliku Konfiguracji

/etc/ssh/sshd_config

Ustawienie Szyfrowania

# /etc/ssh/sshd_config
Kexalgorithms <algorytms>
Ciphers <algorytms>
MACs <algorytms>

EXAMPLE

# /etc/ssh/sshd_config
Kexalgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256, diffie-hellman-group14-sha1

MACs hmac-sha2-512@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com

Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

Testuj Konfiguracje SSH, przed restartem SSHD

sudo sshd -t

Sprawdzanie algorytmów używanych przez SSH obecnie

sshd -T | egrep -iw "ciphers|kexalgorithms|macs"


pi@chris:~ $ sudo  sshd -T | egrep -iw "ciphers|kexalgorithms|macs"
ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
macs umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
pi@chris:~ $