Long story short: I highly recommend reading the stribika article, https://stribika.github.io/2015/01/04/secure-secure-shell.html. Note: before deploying these settings, make sure your version of openssh supports them! sshd_config
blog of sj
thoughts about IT, life, and other topics