wodSSHTunnel ActiveX Control - Encryption Property
 Encryption Property
      
 

Description

Determines the encryption algorithm to be used with SSH.


Property type

An EncryptionsEnum enumeration.  


Syntax

object.Encryption [= value]



The Encryption Property syntax has these parts:

Part Description
object An expression evaluating to an object of type wodTunnel.
value An EncryptionsEnum enumeration, as described in settings.

Settings

The settings for value are:

Constant Value Description
 encAny 0 Anything suitable, selected by wodSSHTunnel component.
 encDES 1 DES encryption
 enc3DES 2 3DES encryption
 encAES 3 AES encryption
 encBLOWFISH 4 BLOWFISH encryption
 encAES128 5 AES 128bit encryption
 encAES192 6 AES 192bit encryption
 encAES256 7 AES 256bit encryption
 encCAST128 8 CAST 128 encryption

Remarks

During negotiation of a secure connection between wodSSHTunnel and a remote server, when set to anything other than encAny, wodSSHTunnel will only allow the specified encryption algorithm to be used for encrypted data transmission. If this property is set to encAny (as it is by default), any encryption known by both wodSSHTunnel and the remote server may be used.

wodSSHTunnel's implementation forces selection of encryption algorithms (for encAny value) in this order:

  1. For an SSH1 connection it will try to negotiate the TripleDES algorithm. If it fails, it will try Blowfish. If this is not available (on the remote server), it will fallback to DES. Please note that the DES algorithm has been declared 'insecure', so you should avoid using it if possible.
  2. For an SSH2 connection it will attempt to negotiate AES (any type) first. If it fails, TripleDES will be attempted. If this is not available, it will try Blowfish. If this is also not available, the connection will be dropped. DES will not be attempted because most (new) servers don't support it due to its poor security.

For a list of all supported encryption methods, please refer to the EncryptionsEnum page. Additional encryption methods can be added to wodSSHTunnel on your request. If you have a requirement, please feel free to send your request to general@weonlydo.com.