JSch Algorithm negotiation fail

As you can see, the server offers these ciphers:

INFO: kex: server: aes256-cbc,aes192-cbc

But JSch accepts only these:

INFO: kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc

There’s no common cipher to choose from.


Note that JSch does support both aes256-cbc and aes192-cbc, but requires JCE (Java Cryptography Extension) to allow them.

You probably do not have JCE, so these ciphers are not available. That’s why there’s

INFO: aes256-cbc is not available.


Download Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 8 (or other version if other JDK – 1.7, 1.6, IBM JDK 1.6).

See also an answer to The cipher ‘aes256-cbc’ is required, but it is not available.

Leave a Comment