ID: INFO-13

Title: SSH daemon only supports deprecated key exchange algorithms

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: The Dropbear SSH daemon (version 2012.55) exclusively supports diffie-hellman-group1-sha1 and diffie-hellman-group14-sha1 for key exchange. Both algorithms are deprecated and neither is accepted by modern SSH clients without explicitly downgrading security settings. The Dropbear build date of 2012 confirms the SSH implementation has received no security updates in over a decade.

Remediation: Update the Dropbear SSH daemon to a current release that supports modern key exchange algorithms such as curve25519-sha256. Disable support for deprecated algorithms.

More information: See System Hardening Analysis chapter.