Algorithms for SFTP
Automate MFT supports a configurable set of SFTP security algorithms that are used when establishing secure connections to SFTP servers. These algorithms control key exchange, encryption, message integrity verification, and host identity validation during SFTP session negotiation.
The following tables list the algorithms supported by Automate MFT. Algorithms are displayed in their default preference order. Administrators can enable, disable, and reorder algorithms when configuring an SFTP endpoint.
Important: SFTP servers may support different algorithm sets. If connection negotiation fails, review the configured algorithms on both the Automate MFT endpoint and the remote SFTP server to ensure that compatible algorithms are enabled.
Table 1. Key Exchange Algorithms
|
Algorithm |
|---|
| mlkem768x25519-sha256 |
| sntrup761x25519-sha512 |
| sntrup761x25519-sha512@openssh.com |
| curve25519-sha256 |
| curve25519-sha256@libssh.org |
| ecdh-sha2-nistp256 |
| ecdh-sha2-nistp384 |
| ecdh-sha2-nistp521 |
| diffie-hellman-group-exchange-sha256 |
| diffie-hellman-group16-sha512 |
| diffie-hellman-group18-sha512 |
| diffie-hellman-group14-sha256 |
| diffie-hellman-group-exchange-sha1 |
| diffie-hellman-group14-sha1 |
| diffie-hellman-group1-sha1 |
Table 2. Encryption Algorithms
|
Algorithm |
|---|
| aes128-ctr |
| aes192-ctr |
| aes256-ctr |
| aes128-gcm@openssh.com |
| aes256-gcm@openssh.com |
| chacha20-poly1305@openssh.com |
| aes128-cbc |
| aes192-cbc |
| aes256-cbc |
| 3des-cbc |
Table 3. HMAC Algorithms
|
Algorithm |
|---|
| hmac-sha2-256 |
| hmac-sha2-512 |
| hmac-sha1 |
| hmac-sha2-256-etm@openssh.com |
| hmac-sha2-512-etm@openssh.com |
| hmac-sha1-etm@openssh.com |
Table 4. Host Public Key Algorithms
|
Algorithm |
|---|
| ssh-ed25519-cert-v01@openssh.com |
| ecdsa-sha2-nistp256-cert-v01@openssh.com |
| ecdsa-sha2-nistp384-cert-v01@openssh.com |
| ecdsa-sha2-nistp521-cert-v01@openssh.com |
| rsa-sha2-512-cert-v01@openssh.com |
| rsa-sha2-256-cert-v01@openssh.com |
| ssh-rsa-cert-v01@openssh.com |
| ssh-ed25519 |
| ecdsa-sha2-nistp256 |
| ecdsa-sha2-nistp384 |
| ecdsa-sha2-nistp521 |
| rsa-sha2-512 |
| rsa-sha2-256 |
| ssh-rsa |