EnterpriseDT and SHA 256

Question

I was wondering whether or not SHA256 would be included into newer versions of the enterpriseDT SFTP library for Key Exchange and MAC algorithms? The company I work for is pushing for us to use SHA256 in the near future. We would like to continue using this product because we already have code in place to work with this library. Thanks.

Answer 1

Thanks for the suggestion. We'll look at including it for the 7.4.0 release (7.3.0 is due out next week). Obviously it's something we will need to support.

Answer 2

We've just added diffie-helman-group-exchange-sha256 so that will be definitely be in 7.4.0.

I'd like to know what SHA256 MAC algorithms you are interested in. It's not in any RFCs as far as I know, and the only implementation I'm aware of is hmac-sha256@ssh.com.

Answer 3

Awesome. Thank you for letting me know about that. The hmac-sha256@ssh.com should work fine. The sftp server I would connecting to is [url]http://www.attachmate.com/Products/mft/Security/rist-winserver/tech-specs-win-server.htm[/url] which does not say which MAC algorithm that they accept. I am looking around to see if they have any documentation that says so.