In the past I've had this in my sshd_config files: Ciphers aes256-ctr MACs hmac-sha2-512 This is one recommended way for forward secrecy https://github.co

In the past I've had this in my sshd_config files: Ciphers aes256-ctr MACs hmac-sha2-512 This is one recommended way for forward secrecy https://github.com/ioerror/duraconf/blob/master/configs/sshd/sshd-pfs_config https://github.com/ioerror/duraconf/blob/master/configs/sshd... Unfortunately my favored Android SSH client (juiceSSH) couldn't handle that so I had to change to: Ciphers aes256-ctr,aes256-cbc MACs hmac-sha1 which is rather unfortunate, but still turned out to have been a good thing in light of this vulnerability (I'm running 6.2 on all my machines because of the DoS vulnerability in earlier versions).