Despite what is stated in the bug tracker CSCuw19798 is *not* fixed in IOS-XE 3.6.5E From the release notes on 3.6.5E they don't seem aware they are even affected by this bug. It is not fixed in 3.6.6E either.
From my own testing Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.3(3)M5, RELEASE SOFTWARE (fc3) also suffers from this bug impacting SSH security.
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.3(3)M5, RELEASE SOFTWARE (fc3)does not support AES in CTR mode for SSH connections.
USNO is requiring 64 HEX Characters (32 Bytes) but they're using the full HEX table, to include all sorts of special characters otherwise disallowed. Is there planned support for using HEX keys?