topic How to disable SSH Weak MAC Algorithms in Operating System - HP-UX

How to disable SSH Weak MAC Algorithms

dictum9 — Mon, 01 Jun 2015 17:42:02 GMT

11.31

ssh -v #06/01/15 1:41PM#
OpenSSH_6.2p1+sftpfilecontrol-v1.3-hpn13v12, OpenSSL 0.9.8y 5 Feb 2013
HP-UX Secure Shell-A.06.20.006, HP-UX Secure Shell version

The only statement in the ssh*config files relevant to Ciphers is. Why does the scan pickup that I have "SSH Weak MAC Algorithms"?

Ciphers aes128-ctr,aes192-ctr,aes256-ctr

Re: How to disable SSH Weak MAC Algorithms

Patrick Wallek — Mon, 01 Jun 2015 19:04:43 GMT

Have a look at these articles:

http://linux.uits.uconn.edu/gms02004/2014/06/25/ssh-weak-ciphers-and-mac-algorithms/

http://security.stackexchange.com/questions/39756/secure-configuration-of-ciphers-macs-kex-available-in-ssh

Re: How to disable SSH Weak MAC Algorithms

uxbeginner22 — Thu, 11 Jun 2015 21:20:08 GMT

My sshd has those,works fine

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128
MACs hmac-sha1,umac-64@openssh.com,hmac-ripemd160