Triple DES (3DES) algorithm still appearing as the first preferred encryption algorithm in MOVEit Automation

Triple DES (3DES) continues to appear as the first preferred encryption algorithm in the PGP key cipher list, despite selecting a stronger algorithm (e.g., AES-256) in the Web Admin interface.

Nov 6, 2025
Knowledge

Title

URL Name

Triple-DES-3DES-algorithm-still-appearing-as-the-first-preferred-encryption-algorithm-in-MOVEit-Automation

Article Number

000293855

Environment

Product: MOVEit Automation Version: All supported versions OS: All supported platforms

Question/Problem Description

Why does the 3DES encryption algorithm show as first in the list of preferred encryption algorithms?

Steps to Reproduce

The dropdown for "Preferred Encryption Algorithm" sets an internal MOVEit Automation preference for encryption during operations, but does not alter the actual cipher order on the PGP key itself. The dropdown preference applies only within MOVEit Automation and does not affect exported keys. This is by design. However, the bug is that 3DES remains first in the cipher list, which should not happen for newly created keys.

Clarifying Information

When a file or message is encrypted using PGP, the encryption algorithm used can be determined in two ways:

1. Default (Preferred Algorithm from Recipient's Key)

Every PGP public key includes metadata that lists the preferred encryption algorithms of the recipient.
If the admin chooses "Default", the system will automatically use the first preferred algorithm listed in the recipient’s public key.
This ensures compatibility and respects the recipient’s security preferences.
For reference, here is the link to our product guide that says the same -
URL - https://docs.progress.com/bundle/moveit-automation-web-admin-help-2025/page/Edit-PGP-Keys.html

2. Override (Manual Selection)

If the admin manually selects an algorithm (e.g., AES256, 3DES), this overrides the recipient’s preference.
This can be useful if the organisation enforces a specific encryption standard or if one needs a stronger encryption than the default.

Now, in this case, upon creating new PGP keys in MOVEit Automation (versions 2024.x and 2025.x), the cipher list still shows 3DES as the first preferred algorithm. Even if the user selects AES-256 as the "Preferred Encryption Algorithm" in Web Admin, this preference only applies internally within MOVEit Automation and does not update the exported PGP key.

Error Message

Defect Number

96885

Enhancement Number

Cause

It was identified that this is due to a defect.

Resolution

The cipher list will be updated so that stronger algorithms (AES-256, AES-192, AES-128) appear before 3DES. This will be fixed in the future release.

Workaround

Notes

Keyword Phrase

Last Modified Date

8/24/2026 10:29 PM