I am hardening the configuration for my
/etc/ssh/sshd_config and have a few choices for
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc, aes256-cbc,arcfour
Of these, there are some I know not to use, such as
arcfour. Beyond that, I often have to search forums and blog posts to find out if a particular cipher suite is still strong. Sometimes this information can be out of date or inaccurate. I have a tough time trusting it.
Is there a reference or website that keeps up to date information on the relative strength of each cipher suite? Ideally, I'd like to know the current situation for both SSH and TLS settings. Also, is there any service that will notify you when the list changes (with the addition of a new cipher suite or the degradation of an old one).
Assuming I'm willing and able to upgrade at any point, I'd like to use the strongest and most secure settings available.