| Cryptographic Functions | Full Name (Default Mode) | FIPS Mode | Secure Mode (SSH Only) |
|---|---|---|---|
| Hash Function (used for authentication) | |||
| In SNMPv3 | MD5 | ||
| SHA | Yes | ||
| HMAC-MD5 | |||
| HMAC-SHA-1 | Yes | ||
| In SSH | hmac-md5-96 | ||
| hmac-md5-etm@openssh.com | |||
| hmac-md5-96-etm@openssh.com | |||
| hmac-sha1 | Yes | Yes | |
| hmac-sha1-96 | |||
| hmac-sha1-etm@openssh.com | |||
| hmac-sha1-96-etm@openssh.com | |||
| hmac-sha2-256 | Yes | Yes | |
| hmac-sha2-512 | Yes | Yes | |
| hmac-sha2-256-etm@openssh.com | |||
| hmac-sha2-512-etm@openssh.com | |||
| hmac-ripemd160 | |||
| hmac-ripemd160@openssh.com | |||
| hmac-ripemd160-etm@openssh.com | |||
| In AAA | SHA-256 | Yes | Yes |
| In NTP | SHA-256 | Yes | |
| Symmetric Algorithms (used for encryption of file or text) | |||
| In SSH, SNMPv3 | DES | ||
| 3DES | Yes | ||
| AES128 | Yes | ||
| AES192 | Yes | ||
| AES256 | Yes | ||
| In SSH | Blowfish | ||
| CAST | |||
| ARC4-128 | |||
| ARC4-256 | |||
| AES128-CTR | Yes | Yes | |
| AES192-CTR | Yes | Yes | |
| AES256-CTR | Yes | Yes | |
| rijndael-cbc@lysator.liu.se | Yes | ||
| chacha20-poly1305@openssh.com | |||
| Asymmetric Algorithms (Factorization of integers) | |||
| In SSH | DSA (Authentication and Digital Signature) | Yes | |
| RSA (Authentication and Encryption) |
Non-approved, but allowed for Key Encryption Decryption |
||
|
diffie-hellman-group1-sha1 exchange key (authentication) |
Non-approved, but allowed for key exchange |
||