SSH Protocol v.2 protocol start Server and client exchange banners Client and server both send MSG_KEXINIT packet Random nonce Supported/Allowed algorithms to use for key exchange Supported/Allowed server host key formats Supported/Allowed symmetric algorithms (both ways) Supported/Allowed MAC algorithms Supported/Allowed compression algorithms Supported/Allowed languages Flag indicating "KEX guess" The suppored/allowed lists are comma-separated strings E.g. "aes128-cbc, 3des-cbc, arcfour"