Here is a pretty good guide for configuring SSH in a secure way that also goes into detail regarding the crypto side: https://stribika.github.io/2015/01/04/secu

Here is a pretty good guide for configuring SSH in a secure way that also goes into detail regarding the crypto side: https://stribika.github.io/2015/01/04/secure-secure-shell.html https://stribika.github.io/2015/01/04/secure-secure-shell.ht... You probably also want to set kex, ciphers and MAC preferences in your client config for when you connect to servers with suboptimal settings. Personally, I have also moved away from RSA keys and prefer using Ed25519 ones instead.