> For the complete documentation index, see [llms.txt](https://docs.exavault.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.exavault.com/connection-methods/sftp/supported-ssh-ciphers.md).

# Supported SSH Ciphers

The SSH ciphers below are supported for use with SFTP.

## Key Exchange Algorithms

* <curve25519-sha256@libssh.org>
* curve25519-sha256
* ecdh-sha2-nistp256
* ecdh-sha2-nistp384
* ecdh-sha2-nistp521
* diffie-hellman-group14-sha256
* diffie-hellman-group15-sha512
* diffie-hellman-group16-sha512
* diffie-hellman-group17-sha512
* diffie-hellman-group18-sha512

## Host Key Algorithms

* ssh-rsa
* rsa-sha2-512
* rsa-sha2-256

## Encryption Algorithms

* <aes128-gcm@openssh.com>
* <aes256-gcm@openssh.com>
* aes128-ctr
* aes192-ctr
* aes256-ctr

## MAC Algorithms

* <hmac-sha2-256-etm@openssh.com>
* <hmac-sha2-512-etm@openssh.com>
* <hmac-sha1-etm@openssh.com>
* hmac-sha2-256
* hmac-sha2-512
* hmac-sha1

## Compression Algorithms

* none

The host key length is 4096 bits, which is too large for some older SFTP clients. Use a version of your SFTP client or client library that the vendor currently supports.