Host Key Algorithms Supported in Titan SFTP Server

Host Key Algorithms Supported in Titan SFTP Server

Question

Which host key algorithms are supported in Titan SFTP Server?


Reasoning

As an admin, I would like to know which host key algorithms are supported so we can communicate this to our end users and ensure they can establish a secure connection with Titan SFTP Server.


Answer

In Titan SFTP Server, we support a variety of different host key algorithms, but it is important to understand that the algorithms available depend on the host key type applied to the server.


Supported Host Key Algorithm Chart:



Key Type

Host Key Algorithms

RSA

ssh-rsa (SHA-1)
rsa-sha2-256 (RSA with SHA-256)
rsa-sha2-512 (RSA with SHA-512)

ECDSA

ecdsa-sha2-nistp256 (ECDSA over the P-256 curve)
ecdsa-sha2-nistp384(ECDSA over the P-384 curve)
ecdsa-sha2-nistp521 (ECDSA over the P-521 curve)

ED25519

ssh-ed25519 (edDSA over Curve25519)

DSA (legacy)

ssh-dss (DSA with SHA-1, deprecated)



Explanation of Key Types:

RSA (Rivest–Shamir–Adleman): Common and widely supported, but SHA-1-based ssh-rsa is deprecated due to security concerns.


ECDSA (Elliptic Curve Digital Signature Algorithm): Preferred for higher security with shorter key lengths.


ED25519 (Edwards-Curve Digital Signature Algorithm): Newer, more efficient algorithm based on elliptic curves.


DSA (Digital Signature Algorithm): Deprecated and no longer recommended due to security vulnerabilities and performance issues.



Notes:


- EDDSA is not in the list of server host keys but it is supported and can be created using PuttyGen or any other 3rd party software and imported into Titan NextGen for use as your SSH/SFTP server host key.

- The key type selected determines the available host key algorithms.

- ECDSA and ED25519 are preferred for their performance and security.
​
- RSA is still widely supported but stronger hashing algorithms (rsa-sha2-256 and rsa-sha2-512) are recommended for modern security.




    • Related Articles

    • How To: Create a SFTP Key in Titan Nextgen

      Related To Titan Nextgen Builds 1.x Question How do I create a SFTP keys in Titan Nextgen? Reasoning I would like to be able to create a SFTP host keys for secure SFTP encrypted connections. Answer You have the option in Titan Nextgen to create ...

    • How To: Setup Key Authentication for SFTP in Titan

      Question How do I setup key authentication for SFTP in Titan. Reasoning I have a requirement from end users that need to add an extra layer of security by connecting to Titan via SFTP with key authentication.  Answer You have the option in Titan to ...

    • Titan SSH Host Keys

      Titan FTP Server can use Secure File Transfer Protocol (SFTP), a Host Key Authentication method which adds Secure Shell (SSH) protection to your data transfers. This is Public Key Infrastructure (PKI), which is the use of a key pair made up of a ...

    • SSH Public Key Authentication with Titan Server -- Enable and Configure

      Please see the video below for a visual and descriptive guide to using SSH Public Key Authentication with Titan Server. Titan Server: SSH Public Key Authentication

    • Titan FTP Server Release Notes

      Important Information Titan FTP Server must be installed under an account that has full administrative rights to the computer on which the software is being installed. To uninstall Titan FTP Server, use the Add/Remove Programs feature of the Windows ...