|
Category |
SFTP (Legacy) JSCH 0.1.53 |
SFTP V2 - Version 14 JSCH 0.1.55 |
SFTP V2 - Version 16 JSCH 0.1.58 |
SFTP [new] JSCH 0.2.19 |
|
Host key type (server_host_key) |
diffie-hellman-group14-sha1*, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521 |
ssh-rsa*, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521, ssh-dss* |
ssh-rsa*, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521, rsa-sha2-512, rsa-sha2-256 |
ssh-ed25519, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521, rsa-sha2-512, rsa-sha2-256 Note* : The '*' denotes algorithms from v53, v55, v58 - diffie-hellman-group14-sha1, ssh-rsa, ssh-dss are not enabled by default in v0.2.19 but implementations for these are available to re-enable if needed. |
|
MAC (mac.s2c& mac.c2s) |
hmac-sha1, hmac-sha2-256, hmac-md5*, hmac-sha1-96*, hmac-md5-96* |
hmac-sha1, hmac-sha2-256, hmac-md5*, hmac-sha1-96*, hmac-md5-96* |
hmac-sha1, hmac-sha2-256, hmac-sha2-512, hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha1-etm@openssh.com |
hmac-sha1, hmac-sha2-256, hmac-sha2-512, hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha1-etm@openssh.com Note* : The '*' denotes algorithms from v53, v55 are not enabled by default in v 0.2.19 but implementations for these are available to re-enable if needed. |
|
Key exchange (kex) |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group-exchange-sha1*, diffie-hellman-group1-sha1*, diffie-hellman-group14-sha1* |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group-exchange-sha1*, diffie-hellman-group1-sha1*, diffie-hellman-group14-sha1* |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group14-sha256, curve25519-sha256, curve25519-sha256@libssh.org |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group14-sha256, curve25519-sha256, curve25519-sha256@libssh.org Note* : The '*' denotes algorithms from v53, v55 are not enabled by default in v 0.2.19 but implementations for these are available to re-enable if needed. |
|
Ciphers (cipher.c2s) (cipher.s2c) |
aes128-ctr, aes192-ctr, aes256-ctr, blowfish-cbc*, 3des-cbc*, aes128-cbc*, aes192-cbc*, aes256-cbc*, 3des-ctr* |
aes128-ctr, aes192-ctr, aes256-ctr, blowfish-cbc*, 3des-cbc*, aes128-cbc*, aes192-cbc*, aes256-cbc*, 3des-ctr* |
aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, aes256-gcm@openssh.com |
aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, aes256-gcm@openssh.com
Note* : The '*' denotes algorithms from v53, v55 are not enabled by default in v 0.2.19 but implementations for these are available to re-enable if needed. |
|
Check Ciphers (CheckCiphers) |
aes256-ctr, aes192-ctr, aes128-ctr, aes256-cbc, aes192-cbc, aes128-cbc, 3des-ctr, arcfour, arcfour128, arcfour256 |
aes256-ctr, aes192-ctr, aes128-ctr, aes256-cbc, aes192-cbc, aes128-cbc, 3des-ctr, arcfour, arcfour128, arcfour256 |
aes256-ctr, aes192-ctr, aes128-ctr, aes256-cbc, aes192-cbc, aes128-cbc, 3des-ctr, arcfour, arcfour128, arcfour256, aes256-gcm@openssh.com, aes128-gcm@openssh.com |
chacha20-poly1305@openssh.com |
|
Check kex (CheckKexes) |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group14-sha1 |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group14-sha1 |
ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group14-sha1, Diffie-hellman-group14-sha256, Diffie-hellman-group16-sha512, Diffie-hellman-group18-sha512, Curve25519-sha256, curve25519-sha256@libssh.org |
sntrup761x25519-sha512@openssh.com,curve25519-sha256, curve448-sha512 |
Note * - In the table '*' denotes algorithms that are not defined as default in the newer versions, although their implementations are still available to be re-enabled - Find more information here with SHA1 as an example
As you notice that between all these connectors/comparisons, 0.2.x version upgrade has some significant improvements as compared to version 0.1.x
These improvements include:
Disable RSA/SHA1 signature algorithm by default. These algorithms are not considered secure by the modern standards - More information to re-enable them is provided here
Modern crypto support by supporting chacha20-poly1305@openssh.com cipher
Fixing various security vulnerabilities and removing support for some cryptographically weak algorithms.
SFTP V2 connector | Boomi Documentation
SFTP connector | Boomi Documentation
JSch - Java Secure Channel (jcraft.com)
GitHub - mwiede/jsch: fork of the popular jsch library