This document lists the cryptographic algorithms supported by the ConnectBot SSH library.
Algorithms labeled legacy opt-in are implemented for compatibility but are
not offered by the default SshClientConfig. Applications must add them
explicitly to the corresponding algorithm string.
keyboard-interactivepasswordpublickey(including FIDO2 / Security Key algorithmssk-ssh-ed25519@openssh.comandsk-ecdsa-sha2-nistp256@openssh.com)
ssh-ed25519(RFC 8709)ssh-ed448(RFC 8709)ecdsa-sha2-nistp256(RFC 5656)ecdsa-sha2-nistp384(RFC 5656)ecdsa-sha2-nistp521(RFC 5656)rsa-sha2-512(RFC 8332)rsa-sha2-256(RFC 8332)ssh-rsa(RFC 4253) — legacy opt-in
mlkem768x25519-sha256(draft-ietf-sshm-mlkem-hybrid-kex) (depends on JEP-496 support)curve25519-sha256(RFC 8731)ecdh-sha2-nistp521(RFC 5656)ecdh-sha2-nistp384(RFC 5656)ecdh-sha2-nistp256(RFC 5656)diffie-hellman-group18-sha512(RFC 8268)diffie-hellman-group16-sha512(RFC 8268)diffie-hellman-group14-sha256(RFC 8268)diffie-hellman-group-exchange-sha256(RFC 4419)diffie-hellman-group14-sha1(RFC 4253) — legacy opt-indiffie-hellman-group-exchange-sha1(RFC 4419) — legacy opt-indiffie-hellman-group1-sha1(RFC 4253) — legacy opt-in
chacha20-poly1305@openssh.com(draft-ietf-sshm-chacha20-poly1305)aes256-gcm@openssh.com(draft-miller-sshm-aes-gcm)aes128-gcm@openssh.com(draft-miller-sshm-aes-gcm)aes256-ctr(RFC 4344)aes128-ctr(RFC 4344)aes256-cbc(RFC 4253) — legacy opt-inaes128-cbc(RFC 4253) — legacy opt-in3des-cbc(RFC 4253) — legacy opt-in
hmac-sha2-512-etm@openssh.com(OpenSSH PROTOCOL)hmac-sha2-256-etm@openssh.com(OpenSSH PROTOCOL)hmac-sha1-etm@openssh.com(OpenSSH PROTOCOL) — legacy opt-inhmac-sha2-512(RFC 4868) — legacy opt-inhmac-sha2-256(RFC 4868) — legacy opt-inhmac-sha1(RFC 4253) — legacy opt-in