Ciphers - HP NonStop SSH 544701-014 Reference Manual

*
Means no authentication banner is displayed.
filename
Specifies the file name containing the authentication banner to be displayed.
Considerations
•
The BANNER file can be an edit file containing multiple lines.
Default
If omitted, BANNER is set to *.
Example
BANNER $SYSTEM.SSH2.BANNER

CIPHERS

Use this parameter to specify which cipher suites are admissible for the SSH2 server.
Parameter Syntax
CIPHERS suite [, suite, ...]
Arguments
suite
Specifies a cipher suite. Currently the following cipher suites are supported by SSH2:
aes256-cbc: AES (Rijndael) in CBC mode, with 256-bit key
o
aes128-cbc: AES with 128-bit key
o
twofish256-cbc: Twofish in CBC mode, with 256-bit key
o
twofish128-cbc: Twofish with 128-bit key
o
twofish-cbc: alias for "twofish256-cbc" (Note: this is being retained for historical reasons)
o
blowfish-cbc: Blowfish in CBC mode
o
3des-cbc: three-key 3DES in CBC mode
o
o arcfour: the ARCFOUR stream cipher
cast128-cbc: CAST-128 in CBC mode
o
Considerations
For details about the ciphers listed above, please refer to standard SSH documentation, such as the manual for the RFCs
available.
Default
If omitted, SSH2 will accept all ciphers mentioned above.
Example
CIPHERS 3des-cbc
This will enforce the use of only 3DES-encryption.
64 • Configuring and Running SSH2
HP NonStop SSH Reference Manual