Skip to content

Commit fb66fbf

Browse files
authored
[SFTP] Add more crypto algorithm considerations
Mention algorithms we currently don't plan to support (subject to change). Mention RSA min key length of 2048 bits.
1 parent d218a35 commit fb66fbf

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

articles/storage/blobs/secure-file-transfer-protocol-support.md

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -110,13 +110,18 @@ You can use many different SFTP clients to securely connect and then transfer fi
110110

111111
| Host key | Key exchange | Ciphers/encryption | Integrity/MAC | Public key |
112112
|----------|--------------|--------------------|---------------|------------|
113-
| rsa-sha2-256 | ecdh-sha2-nistp384 | [email protected] | hmac-sha2-256 | ssh-rsa |
114-
| rsa-sha2-512 | ecdh-sha2-nistp256 | [email protected] | hmac-sha2-512 | ecdsa-sha2-nistp256 |
113+
| rsa-sha2-256 <sup>1</sup> | ecdh-sha2-nistp384 | [email protected] | hmac-sha2-256 | ssh-rsa <sup>1</sup> |
114+
| rsa-sha2-512 <sup>1</sup> | ecdh-sha2-nistp256 | [email protected] | hmac-sha2-512 | ecdsa-sha2-nistp256 |
115115
| ecdsa-sha2-nistp256 | diffie-hellman-group14-sha256 | aes128-cbc| [email protected] | ecdsa-sha2-nistp384 |
116116
| ecdsa-sha2-nistp384| diffie-hellman-group16-sha512 | aes256-cbc | [email protected] |
117117
||| aes192-cbc ||
118118

119-
SFTP support for Azure Blob Storage currently limits its cryptographic algorithm support based on security considerations. We strongly recommend that customers utilize Microsoft Security Development Lifecycle (SDL) approved algorithms to securely access their data. More details can be found [here](/security/sdl/cryptographic-recommendations).
119+
<sup>1</sup> Requires minimum key length of 2048 bits.
120+
121+
SFTP support for Azure Blob Storage currently limits its cryptographic algorithm support based on security considerations. We strongly recommend that customers utilize [Microsoft Security Development Lifecycle (SDL) approved algorithms](/security/sdl/cryptographic-recommendations) to securely access their data.
122+
123+
> [!IMPORTANT]
124+
> Algorithm support is subject to change in the future. At this time, we do not plan on supporting the following: `ssh-dss`, `diffie-hellman-group14-sha1`, `diffie-hellman-group1-sha1`, `hmac-sha1`, `hmac-sha1-96`.
120125
121126
### Known supported clients
122127

0 commit comments

Comments
 (0)