Ciphers

Ciphers refer to the encryption technology that is used under the hood for encrypting data as it is in transit to and from SmartFile using SSL (and TLS).

At SmartFile we take security seriously and rely on industry best practices for choosing secure encryption technologies.

We support TLS 1.2 and 1.3 for FTP, WebDAV, API, and HTTP connections.

This page covers Cipher support for SmartFile's hosted cloud platform. For documentation on Cipher support for FileHub On Premise servers, see On Premise Ciphers.

A Note about the Term SSL vs TLS

TLS refers to a more modern standard that replaced the SSL standard. When either term is used without a specific version number (such as SSLv3 or TLSv1.2), the terms TLS and SSL are used interchangeably on our documentation and website.

TLS/SSL Cipher List

Here's a list of Ciphers we currently support for TLS/SSL:

• ECDHE-RSA-AES128-CBC-SHA256

• ECDHE-RSA-AES128-GCM-SHA256

• ECDHE-RSA-AES256-CBC-SHA384

• ECDHE-RSA-AES256-GCM-SHA384

• ECDHE-RSA-ARIA-128-GCM-SHA256

• ECDHE-RSA-ARIA-256-GCM-SHA384

• ECDHE-RSA-CAMELLIA-128-CBC-SHA256

• ECDHE-RSA-CAMELLIA-256-CBC-SHA384

• ECDHE-RSA-CHACHA20-POLY1305-SHA256

• RSA-AES128-CBC-SHA256

• RSA-AES128-CCM

• RSA-AES128-CCM8

• RSA-AES128-GCM-SHA256

• RSA-AES256-CBC-SHA256

• RSA-AES256-CCM

• RSA-AES256-CCM8

• RSA-AES256-GCM-SHA384

• RSA-ARIA-128-GCM-SHA256

• RSA-ARIA-256-GCM-SHA384

• RSA-CAMELLIA-128-CBC-SHA256

• RSA-CAMELLIA-256-CBC-SHA256

SFTP

SFTP does not use TLS or SSL at all, and instead implements its own encryption standards and cipher naming.

By default, SmartFile's Cloud platform supports the following security algorithms for SFTP:

Key Exchange	curve25519-sha256 [e-mail] curve448-sha512 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group18-sha512 diffie-hellman-group17-sha512 diffie-hellman-group16-sha512 diffie-hellman-group15-sha512 diffie-hellman-group14-sha256
Server Host Key Algorithms	ssh-rsa rsa-sha2-256 rsa-sha2-512
Encryption	[e-mail] aes128-ctr (a.k.a. AES-128 SDCTR [AES-NI accelerated]) aes192-ctr (a.k.a. AES-192 SDCTR [AES-NI accelerated]) aes256-ctr (a.k.a. AES-256 SDCTR [AES-NI accelerated]) [e-mail] [e-mail]
MAC	hmac-sha2-256 hmac-sha2-512 hmac-sha1 [e-mail] [e-mail] [e-mail]