Supported Ciphers, Algorithms and Key Exchange Methods - Filezilla October 2022

[dkifer_bt]

I'm trying to understand what the current supported ciphers are that filezilla supports. The only recent indication and only official notes I can find are here on the forums and date back to October 2019. viewtopic.php?t=51336

Can someone familiar with Filezilla's ciphers let me know what cipher versions are supported?

In particular, I'm looking to confirm whether filezilla supports the below ciphers and algorithms (Having the full supported list would be preferable though):

Ciphers
AES-256-GCM
AES-256-CTR

Algorithms
HMAC-SHA2-512
HMAC-SHA2-256

Key Exchange Methods
CURVE25519-SHA256
ECDH-SHA2-NISTP384
ECDH-SHA2-NISTP256
ECDH-SHA2-NISTP521
DIFFIE-HELLMAN-GROUP18-SHA512
DIFFIE-HELLMAN-GROUP17-SHA512
DIFFIE-HELLMAN-GROUP16-SHA51
DIFFIE-HELLMAN-GROUP15-SHA512
DIFFIE-HELLMAN-GROUP14-SHA256
DIFFIE-HELLMAN-GROUP-EXCHANGE-SHA256

[botg]

Have you tried using the algorithms to see which results you get?

Which protocol are you referring to?

[dkifer_bt]

All of the above. I'm trying to basically confirm that Filezilla will be able to still connect to a system once the owner disables older ciphers/protocols. If there's an easier way to identify the ciphers/protocols/algorithms supports (ie.documentation or specific file in source code that lays it out), then this will allow me to confirm manually. However, I haven't been able to find any documentation that helps.

Is there any where that lays out all the ciphers/protocols/algorithms that filezilla supports?

[botg]

All of the above.

Okay, so you already know what happens for each algorithm on each protocol.

[dkifer_bt]

No - I have not tried testing each individually. It's an onoros task and difficult to complete an a corporate environment without busting through red tape. Is there documentation or not that I can use to clarify whether these are all supported or not?

[botg]

Some if not most of these algorithms are used in some way or another.

Whether they are actually used depends on the actual handshake and the possible combinations of the various building blocks. You have to try it out to see whether it works in the individual case.