Cryptographic Functions | Full Name (Default Mode) | FIPS Mode | Secure Mode (SSH Only) |
---|---|---|---|
Hash Function (used for authentication) | |||
In SNMPv3 | MD5 (Message-Digest algorithm 5) | ||
SHA | Yes | ||
HMAC-MD5 | |||
HMAC-SHA-1 | Yes | ||
In SSH | hmac-md5-96 | ||
hmac-md5-etm@openssh.com | |||
hmac-md5-96-etm@openssh.com | |||
hmac-sha1 | Yes | Yes | |
hmac-sha1-96 | |||
hmac-sha1-etm@openssh.com | |||
hmac-sha1-96-etm@openssh.com | |||
hmac-sha2-256 | Yes | Yes | |
hmac-sha2-512 | Yes | Yes | |
hmac-sha2-256-etm@openssh.com | |||
hmac-sha2-512-etm@openssh.com | |||
hmac-ripemd160 | |||
hmac-ripemd160@openssh.com | |||
hmac-ripemd160-etm@openssh.com | |||
In AAA | SHA-256 | Yes | Yes |
Symmetric Algorithms (used for encryption of file or text) | |||
In SSH, SNMPv3 | DES | ||
3DES | Yes | ||
AES128 | Yes | ||
AES192 | Yes | ||
AES256 | Yes | ||
In SSH | Blowfish | ||
CAST | |||
ARC4-128 | |||
ARC4-256 | |||
AES128-CTR | Yes | Yes | |
AES192-CTR | Yes | Yes | |
AES256-CTR | Yes | Yes | |
rijndael-cbc@lysator.liu.se | Yes | ||
chacha20-poly1305@openssh.com | |||
Asymmetric Algorithms (Factorization of integers) | |||
In SSH | DSA (Authentication and Digital Signature) | Yes | |
RSA (Authentication and Encryption) |
Non-approved, but allowed for Key Encryption Decryption |
||
diffie-hellman-group1-sha1 exchange key (authentication) |
Non-approved, but allowed for key exchange |