Summary
In this circular, ECC informs you about an important security update to the Common Report and Upload Engine (CRE & CUE), effective 31 August 2026.
As part of Deutsche Börse Group's ongoing efforts to strengthen SSH server security, it will remove the deprecated "SSH rsa" key type and the "diffie hellman group14 sha256" Key Exchange Method from its SSH 2.0 connectivity suite, effective 31 August 2026.
To ensure continued secure and reliable connectivity to the CRE and CUE, ECC Members must ensure that all SSH keys used to access these services are fully compliant with the updated security requirements prior to 31 August 2026.
Overall, the following changes will be introduced:
- Removal of deprecated "SSH rsa" key type
- Removal of "diffie hellman group14 sha256" Key Exchange Method
- Introduction of updated supported SSH key types Ed25519 and OpenSSH SSH 2 RSA with minimum 4096 bits
Please find detailed information in the document below.
ECC Clearing & Settlement
T +49 341 24680-444
clearing@ecc.de