Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide
SRG-OS-000250-GPOS-00093
The Ubuntu operating system SSH server must be configured to use only FIPS-validated key exchange algorithms.
The Ubuntu operating system SSH server must be configured to use only FIPS-validated key exchange algorithms.
An XCCDF Rule
Details
Profiles
Prose
The Ubuntu operating system SSH server must be configured to use only FIPS-validated key exchange algorithms.
Medium Severity
<VulnDiscussion>Without cryptographic integrity protections provided by FIPS-validated cryptographic algorithms, information can be viewed and altered by unauthorized users without detection. The system will attempt to use the first algorithm presented by the client that matches the server list. Listing the values "strongest to weakest" is a method to ensure the use of the strongest algorithm available to secure the SSH connection.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>