Is this article helpful?

Algorithms for SFTP

Automate MFT supports a configurable set of SFTP security algorithms that are used when establishing secure connections to SFTP servers. These algorithms control key exchange, encryption, message integrity verification, and host identity validation during SFTP session negotiation.

The following tables list the algorithms supported by Automate MFT. Algorithms are displayed in their default preference order. Administrators can enable, disable, and reorder algorithms when configuring an SFTP endpoint.

Important: SFTP servers may support different algorithm sets. If connection negotiation fails, review the configured algorithms on both the Automate MFT endpoint and the remote SFTP server to ensure that compatible algorithms are enabled.

Table 1. Key Exchange Algorithms

Algorithm

mlkem768x25519-sha256
sntrup761x25519-sha512
sntrup761x25519-sha512@openssh.com
curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
diffie-hellman-group-exchange-sha1
diffie-hellman-group14-sha1
diffie-hellman-group1-sha1

Table 2. Encryption Algorithms

Algorithm

aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm@openssh.com
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com
aes128-cbc
aes192-cbc
aes256-cbc
3des-cbc

Table 3. HMAC Algorithms

Algorithm

hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-sha1-etm@openssh.com

Table 4. Host Public Key Algorithms

Algorithm

ssh-ed25519-cert-v01@openssh.com
ecdsa-sha2-nistp256-cert-v01@openssh.com
ecdsa-sha2-nistp384-cert-v01@openssh.com
ecdsa-sha2-nistp521-cert-v01@openssh.com
rsa-sha2-512-cert-v01@openssh.com
rsa-sha2-256-cert-v01@openssh.com
ssh-rsa-cert-v01@openssh.com
ssh-ed25519
ecdsa-sha2-nistp256
ecdsa-sha2-nistp384
ecdsa-sha2-nistp521
rsa-sha2-512
rsa-sha2-256
ssh-rsa