Fixing CBC Weak Chipper SSH

On Linux :

#vi /etc/ssh/sshd_config

add line this :

Ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com

restart service ssh

testing :

ssh -vv -oCiphers=aes128-cbc,3des-cbc,blowfish-cbc [user@localhost]

On Solaris :

#vi /etc/ssh/sshd_config

add line this :

Ciphers aes128-ctr,aes192-ctr,aes256-ctr
Macs hmac-sha2-256,hmac-sha2-512

restart service ssh

#svcadm restart svc:/network/ssh