Ask a Question

Will Rebex client support below cipher suites, Macs and Algorithms while connecting to CB SFTP server in c#??

0 votes
by (480 points)
edited by

I am connecting to CB sftp server via Rebex in c#. Rebex dll versions used are as below 2.0.4860.0
5.0.7501.0
7.0.8756.0

As part of enhancement at CB SFTP server below are the details of the cipher suites, MACs and key exchange algorithms that are being used at CB sftp server.

Cipher Suites
aes128-gcm@openssh.com

aes256-gcm@openssh.com

chacha20-poly1305@openssh.com

MACs
hmac-sha2-512-etm@openssh.com

hmac-sha2-256-etm@openssh.com

umac-128-etm@openssh.com

hmac-sha2-512
hmac-sha2-256

Key exchange Algorithms
curve25519-sha256
curve25519-sha256@libssh.org

ecdh-sha2-nistp521
ecdh-sha2-nistp384
ecdh-sha2-nistp256
sntrup761x25519-sha512@tinyssh.org

diffie-hellman-group18-sha512

Applies to: Rebex SFTP

1 Answer

0 votes
by (144k points)

Supported in Rebex SFTP v5.0.7450 or higher:

aes128-gcm@openssh.com
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com

hmac-sha2-512-etm@openssh.com
hmac-sha2-256-etm@openssh.com

Supported in Rebex SFTP v5.0.7357 or higher:

curve25519-sha256

Supported in Rebex SFTP v3.0.6198 or higher:

curve25519-sha256@libssh.org
ecdh-sha2-nistp521
ecdh-sha2-nistp384
ecdh-sha2-nistp256

Supported in Rebex SFTP v3.0.5700 or higher:

hmac-sha2-512
hmac-sha2-256

Not supported:

umac-128-etm@openssh.com (weak and already deprecated - no plans to add support for this)
sntrup761x25519-sha512@tinyssh.org (we will most likely add support for this once the specification is finalized; a plugin will be needed)
diffie-hellman-group18-sha512 (we will add support for this as soon as Windows Diffie-Hellman CNG provider supports 8192-bit keys)

Please note that "curve25519" and "nistp" ciphers might need a plugin on some platforms - see the cipher chart for details.

...