Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
5
Newest
 Excavator
Impact
~255 people reached

Nov
27
awarded  Excavator
Nov
27
awarded  Editor
Nov
27
revised Does key authentication in SSH protect from MitM?
add missing RFC link
Nov
27
suggested approved edit on Does key authentication in SSH protect from MitM?
Aug
4
comment Is it safe to derive a password from a signature provided by ssh-agent?
"SSH server actually encrypts a token"? No. The section 2.3 which you refer to describes agent usage with the SSH v1 protocol only; it predates SSH v2 by a few years. According to RFC 4252 section 7, SSH v2 changed this to a regular sign-verify – I'm guessing it was to allow sign-only algorithms such as DSA to be used (RFC 4253 section 6.6), where SSH v1 was limited to RSA only.
Jun
22
awarded  Student
Jun
21
asked Is 256 a reasonable length for a Diffie-Hellman safe prime?
Feb
6
awarded  Supporter
Feb
4
awarded  Autobiographer