Questions tagged [ssh]
The Secure Socket Shell (SSH) protocol is an authentication protocol (described in RFC 4252) for securely getting access to a remote computer.
7
questions
147
votes
1
answer
51k
views
Why does my SSH private key still work after changing some bytes in the file?
I (for a test) just randomly altered a private RSA key by opening it up in Vim and changing a few bytes. It is the private part of an SSH key pair used for logging in on a remote system. Puzzlingly, ...
8
votes
3
answers
8k
views
Why does Openssh use only SHA1 for signing and verifying of digital signatures?
I am learning SSH protocol. With my current understanding of SSH protocol, I think that message digest algorithms for using in digital signature should be derived from Key Exchange. But Openssh ...
47
votes
1
answer
17k
views
Why do all SSH-RSA Keys begin with "AAAAB3NzaC1yc"?
My friend and I have been generating a few SSH2 RSA keys and noticed all the public keys begin with AAAAB3NzaC1yc, with the similarity extending to ...
7
votes
1
answer
915
views
How hard is it to generate a partial RSA fingerprint collision?
When I use SSH to log into a new system, I get asked to verify that the fingerprint (a 32 hex digits string) of the hosts's RSA key is correct. How much if it must I actually compare (by hand/eye) to ...
10
votes
1
answer
13k
views
Why can ssh-keygen export a public key in PEM PKCS8 format?
In the documentation of ssh-keygen (man ssh-keygen) it says for the option -m that an export ...
8
votes
1
answer
2k
views
How does TLS differ from SSH from a strictly cryptographic perspective?
How does TLS differ from SSH from a strictly cryptographic perspective?
I know that there are many non-cryptographic differences between them, but I would like to know the cryptographic ones.
3
votes
1
answer
772
views
implications of SSH server key compromission when authenticating users against a public key
Friday we had a disagreement with a colleague of mine about the implications of SSH server key compromission
The question was stated as this :
What could a hacker do while provided with the SSH ...