# Do Nitrokey PRO2/HSM2 and OpenSSH fit at least Commercial NSA Algo Suite?

**URL:** https://support.nitrokey.com/t/do-nitrokey-pro2-hsm2-and-openssh-fit-at-least-commercial-nsa-algo-suite/2542
**Category:** Nitrokeys
**Created:** [July 19, 2020, 9:34am UTC](https://support.nitrokey.com/t/do-nitrokey-pro2-hsm2-and-openssh-fit-at-least-commercial-nsa-algo-suite/2542 "2020-07-19T09:34:28Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![sanyo](https://support.nitrokey.com/user_avatar/support.nitrokey.com/sanyo/32/593_2.png) [@sanyo](https://support.nitrokey.com/u/sanyo)
#### Post date: [July 19, 2020, 9:34am UTC](https://support.nitrokey.com/t/do-nitrokey-pro2-hsm2-and-openssh-fit-at-least-commercial-nsa-algo-suite/2542/1 "2020-07-19T09:34:28Z")

</div>

Hello,

According to:

> **[Commercial National Security Algorithm Suite](https://en.wikipedia.org/wiki/Commercial_National_Security_Algorithm_Suite)**
>
> The Commercial National Security Algorithm Suite (CNSA) is a set of cryptographic algorithms promulgated by the National Security Agency as a replacement for NSA Suite B Cryptography algorithms. It serves as the cryptographic base to protect US National Security Systems information up to the top secret level, while the NSA plans for a transition to quantum-resistant cryptography.
> The suite includes
> The CNSA transition is notable for moving RSA from a temporary legacy status, as it appeared in S...

> The suite includes
> 
> - [Advanced Encryption Standard](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) with 256 bit keys
> - [Elliptic-curve Diffie–Hellman](https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman) and [Elliptic Curve Digital Signature Algorithm](https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm) with curve [P-384](https://en.wikipedia.org/wiki/P-384)
> - [SHA-2](https://en.wikipedia.org/wiki/SHA-2) with 384 bits, [Diffie–Hellman key exchange](https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange) with a minimum 3072-bit modulus, and
> - [RSA](https://en.wikipedia.org/wiki/RSA_%28cryptosystem%29) with a minimum modulus size of 3072.[[2]](https://en.wikipedia.org/wiki/Commercial_National_Security_Algorithm_Suite#cite_note-:0-2)

Can mentioned algorithms be used in OpenSSH+Nitrokey ?