metadata/service/server/sshd-strong-ciphers.yml

parameters:
  openssh:
    server:
      ciphers:
        "3des-cbc":
          enabled: True
        "aes128-cbc":
          enabled: True
        "aes192-cbc":
          enabled: True
        "aes256-cbc":
          enabled: True
        "aes128-ctr":
          enabled: True
        "aes192-ctr":
          enabled: True
        "aes256-ctr":
          enabled: True
        "aes128-gcm@openssh.com":
          enabled: True
        "aes256-gcm@openssh.com":
          enabled: True
        "chacha20-poly1305@openssh.com":
          enabled: True
        "rijndael-cbc@lysator.liu.se":
          enabled: True