SFTP Server Security Policy

CFT strongly recommends the following security cipher policy configurations for SFTP connection.

SSH ciphers

KEXs

MACs

Known Issue
Users connecting from GSIB or Comet machines may encounter a Corrupted MAC on input error when using these MAC algorithms:

umac-128@openssh.com
umac-128-etm@openssh.com

Resolution
If you encounter this error, please reconnect using one of the other supported MAC algorithms. For example:sftp -o MACs=hmac-sha2-256 sftp.in.cft.stack.gov.sg