cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1404
Views
0
Helpful
3
Replies

How to disable SSH Server CBC Mode Ciphers in CSPC 2.8

kumar.abhijit1
Level 1
Level 1

Hi All,

 

Can you please help me to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption for SSH connectivity in CSPC 2.8.

 

Kumar Abhijit

1 Accepted Solution

Accepted Solutions

jofrumki
Cisco Employee
Cisco Employee

The most recent release for CSPC, 2.8.1.6, has the following ciphers enabled in /etc/ssh/sshd_config;

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc

You may wish to remove the CBC ciphers and run service sshd restart.

 

View solution in original post

3 Replies 3

jofrumki
Cisco Employee
Cisco Employee

The most recent release for CSPC, 2.8.1.6, has the following ciphers enabled in /etc/ssh/sshd_config;

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc

You may wish to remove the CBC ciphers and run service sshd restart.

 

Thanks Jofrumk, It worked.

 
 

Glad to hear it! Please let us know how we can help in the future.