Client Guides:

  1. Amazon Linux 2023
  2. Debian 12 (Bookworm)
  3. Rocky Linux 9
  4. Ubuntu 20.04 LTS / Linux Mint 20
  5. Ubuntu 22.04 LTS / Linux Mint 21
  6. Ubuntu 24.04 LTS / Linux Mint 22

Amazon Linux 2023 ClientLast modified: October 1, 2024

Change Log:

  1. October 1, 2024: Re-ordered cipher list to prioritize larger key sizes as a countermeasure to quantum attacks.
  2. April 22, 2024: added connection throttling instructions to counteract the DHEat denial-of-service attack.
  3. March 15, 2024: Initial revision.

Debian 12 ClientLast modified: October 1, 2024

Change Log:

  1. October 1, 2024: Added RequiredRSASize directive to enforce a minimum of 3072-bit user and host-based authentication keys. Re-ordered cipher list to prioritize larger key sizes as a countermeasure to quantum attacks.
  2. March 15, 2024: Initial revision.

Rocky Linux 9 ClientLast modified: October 1, 2024

Change Log:

  1. October 1, 2024: Added RequiredRSASize directive to enforce a minimum of 3072-bit user and host-based authentication keys. Re-ordered cipher list to prioritize larger key sizes as a countermeasure to quantum attacks.
  2. March 15, 2024: Initial revision.

Ubuntu 22.04 LTS Client / Linux Mint 21 ClientLast modified: October 1, 2024

Change Log:

  1. October 1, 2024: Re-ordered cipher list to prioritize larger key sizes as a countermeasure to quantum attacks.

Ubuntu 20.04 LTS Client / Linux Mint 20 ClientLast modified: October 20, 2020

Ubuntu 24.04 LTS Client / Linux Mint 22 ClientLast modified: October 1, 2024

Change Log:

  1. October 1, 2024: Added RequiredRSASize directive to enforce a minimum of 3072-bit user and host-based authentication keys.
  2. April 29, 2024: Initial revision. In comparison to Ubuntu 22.04 LTS Client guide, the following changes were made: 1.) For key exchanges, diffie-hellman-group18-sha512 and diffie-hellman-group-exchange-sha256 were prioritized over diffie-hellman-group16-sha512 due to greater security strength, 2.) For ciphers, 256-bit AES ciphers were prioritized over 192 and 128-bit AES ciphers due to their increased resistence against quantum computing attacks (previously, weaker GCM ciphers had priority over CTR ciphers), 3.) The HostbasedAcceptedAlgorithms and PubkeyAcceptedAlgorithms settings are now the same as HostKeyAlgorithms setting, and 4.) The hmac-sha2-512-etm@openssh.com MAC was increased in priority due to its increased resistence against quantum computing attacks.