From 81a30e7244613930a0fd0750f7d48109fc12f732 Mon Sep 17 00:00:00 2001 From: Simon Ruderich Date: Mon, 6 Jan 2014 14:39:15 +0100 Subject: [PATCH] sshd_config: Use stronger algorithms. --- sshd_config | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/sshd_config b/sshd_config index dbb774e..47d8577 100644 --- a/sshd_config +++ b/sshd_config @@ -25,6 +25,11 @@ Port 22 # Only use protocol 2. Protocol 1 is insecure. (default) Protocol 2 +# Stronger algorithms. See ssh_config for details. +KexAlgorithms diffie-hellman-group-exchange-sha256 +Ciphers aes256-ctr +MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-512 + # Use privilege separation for increased security. "sandbox" applies # additional restrictions on the unprivileged process. UsePrivilegeSeparation sandbox -- 2.44.1