Salesforce

What SFTP Server Configurations are Supported?

« Go Back
Information
What SFTP Server Configurations are Supported?
What-SFTP-Server-Configurations-are-Supported
Details

Administrators using CyberGrants' Secure File Transfer Protocol (SFTP) systems must understand the supported version, algorithms, and ciphers to ensure seamless connectivity and secure file transfers.

This article provides the required SSH version, server host key algorithms, key exchange algorithms, encryption algorithms (ciphers), and MAC algorithms for administrators to reference when establishing CyberGrants' SFTP server access.

NOTE: The following are no longer supported as of March 13th, 2025:

  • SSH Version: SSH-2.0-OpenSSH_8.4
  • Key Exchange Algorithm: diffie-hellman-group1-sha1
See the chart below to view a definitive list of the supported configurations, serving as a valuable reference for you and your team when setting up or troubleshooting SFTP access.
 
SSH version:SSH-2.0-OpenSSH_9.9
Server Host Key Algorithms:

RSA [1024-bit key]

  • rsa-sha2-512
  • rsa-sha2-256
  • ssh-rsa

ECDSA [256-bit key]

  • ecdsa-sha2-nistp256

EdDSA [256-bit key]

  • ssh-ed25519
Key Exchange Algorithms (KEX)
  • diffie-hellman-group14-sha256
  • diffie-hellman-group16-sha512
  • diffie-hellman-group18-sha512
  • diffie-hellman-group-exchange-sha256
  • curve25519-sha256
  • curve25519-sha256@libssh.org
  • ecdh-sha2-nistp256
  • ecdh-sha2-nistp384
  • ecdh-sha2-nistp521
Encryption Algorithms (Ciphers)
  • chacha20-poly1305@openssh.com
  • aes256-gcm@openssh.com
  • aes128-gcm@openssh.com
  • aes256-ctr
  • aes192-ctr
  • aes128-ctr
MAC Algorithms
  • umac-128-etm@openssh.com
  • hmac-sha2-256-etm@openssh.com
  • hmac-sha2-512-etm@openssh.com
  • umac-128@openssh.com
  • hmac-sha2-256
  • hmac-sha2-512
  • umac-64-etm@openssh.com
  • hmac-sha1-etm@openssh.com
  • umac-64@openssh.com
  • hmac-sha1

Powered by