Aug 24, 2026
Eurex Clearing
Eurex Clearing Readiness Newsflash | Common Report & Upload Engine – Important Reminder: Security update effective 31 August 2026
With this newsflash, Eurex Clearing informs you about DBAG continuously strengthening its SSH server security by updating configurations and deactivating outdated ciphers, key exchange algorithms, and MAC algorithms.
To ensure secure and reliable connectivity to the Common Report and Upload Engine (CRE & CUE), Deutsche Börse will remove the deprecated “SSH rsa” key type and the “diffie hellman group14 sha256” Key Exchange Method from its SSH 2.0 connectivity suite, effective 31 August 2026.
Clients who have not implemented this security update will be unable to connect to CRE and CUE in production in simulation.
To access CRE and CUE, participants must upload a compliant SSH key in the Member Section. The following key types are supported:
1. Ed25519 (Edwards Curve 25519)
Modern elliptic curve key and signature algorithm based on EdDSA/Curve25519.
Offers strong cryptographic security, small key sizes, and fast authentication.
2. OpenSSH SSH 2 RSA (minimum 4096 bits)
Must use SHA256, SHA384, or SHA512 as the signature algorithm.
No maximum key length is defined.
Participants must ensure that all SSH keys fully comply with the current CRE/CUE security requirements. Non compliant keys must be replaced. Participants remain responsible for maintaining secure key management practices.
The above-mentioned changes will be transparent for users of standard SFTP or SSH clients. However, participants using scripts with hard coded key types or Key Exchange Methods must review and update their scripts accordingly.
Please note:
Newly uploaded keys in the Member Section become active on the next business day.
Updates should be implemented as soon as possible and tested in the Simulation environment before being activated in Production.
Kind regards,
Your Client Services Team
Further information
Recipients: | All Clearing Members, ISA Direct Clearing Members, Disclosed Direct Clients of Eurex Clearing AG and vendors | |
Target groups: | Front Office/Trading, Middle + Backoffice, IT/System Administration, Auditing/Security Coordination | |
Contact: | client.services@eurex.com | |
Web: | www.eurex.com/ec-en/ |
