Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
3
Newest
 Student
Impact
~208 people reached

  • 0 posts edited
  • 0 helpful flags
  • 44 votes cast
Aug
4
comment Is it safe to derive a password from a signature provided by ssh-agent?
"SSH server actually encrypts a token"? No. The section 2.3 which you refer to describes agent usage with the SSH v1 protocol only; it predates SSH v2 by a few years. According to RFC 4252 section 7, SSH v2 changed this to a regular sign-verify – I'm guessing it was to allow sign-only algorithms such as DSA to be used (RFC 4253 section 6.6), where SSH v1 was limited to RSA only.
Jun
22
awarded  Student
Jun
21
asked Is 256 a reasonable length for a Diffie-Hellman safe prime?
Feb
6
awarded  Supporter
Feb
4
awarded  Autobiographer