9.1.13.3. Cryptographic Protection¶
In the default FIPS mode, the SSH daemon limits the key exchange algorithms to:
ecdh-sha2-nistp521
ecdh-sha2-nistp384
ecdh-sha2-nistp256
diffie-hellman-group-exchange-sha256
In the default FIPS mode, the SSH daemon limits the message authentication code (MAC) algorithms to:
hmac-sha2-256
hmac-sha1’
In the default FIPS mode, the SSH client limits the key exchange algorithms to:
In the default FIPS mode, the SSH client limits the MAC algorithms to:
hmac-sha2-256
hmac-sha1’
References: SC-13 : CRYPTOGRAPHIC PROTECTION