I have been tasked with reviewing the settings of an SSH server, I'm currently trying to figure out what are the best practices, and I'm having a bit of trouble finding a good answer. I keep finding a lot of information related to web servers, but I don't know if that fully applies here.
These are the currently enabled settings.
SSH Key Type: ssh-dsa (ssh-rsa seems to be recommended)
SSH Ciphers: AES-128-cbc, AES-192-cbc, AES-256-cbc, AES-128-ctr, AES-192-ctr, AES-256-ctr, Rijndael-cbc
SSH MACs: MD5, SHA1, SHA1 96, SHA2 256, SHA2 256-96, SHA2 512, SHA2 512-96
SSH Key Exchange Algorithms: DH-GROUP1-SHA1, DH-GROUP14-SHA1, DH-GROUP14-SHA2 256, DH-GROUP16-SHA2 512, DH-GROUP-EXCHANGE-SHA2 256, ECDH-SHA2-NISTP256, ECDH-SHA2-NISTP384, ECDH-SHA2-NISTP521
Would anyone be able to perhaps point me in the right direction where I can read up on best pactices and what ciphers, MACs, algorithms should be disabled/enabled?