pub static PREFERRED_KEX_ALGOS: &[Name]Expand description
Key-exchange algorithms offered to the server, most-preferred first.
russh’s built-in DEFAULT only includes the post-2020 KEX methods (curve25519, dh-group14-sha256, dh-group16-sha512). Many enterprise / managed SFTP endpoints still require the SHA-1 variants and drop the TCP connection with “Connection reset by peer” during KEX if we don’t offer them. Keeping the modern entries first means security-conscious servers still negotiate up.