How does TLS differ from SSH from a strictly cryptographic perspective?

I know that there are many non-cryptographic differences between them, but I would like to know the cryptographic ones.

  • 2
    $\begingroup$ cipher support. TLS supports a myriad of ciphers, SSH doesn't (but SSH does support Ed25519) $\endgroup$
    – SEJPM
    Mar 1 '16 at 17:31
  • 3
    $\begingroup$ One difference is that in SSH, the encryption ciphers and the MACs are negotiated separately; in TLS, ciphers and MACs are a "suite", and are coupled together by a single value. $\endgroup$
    – Castaglia
    Apr 7 '16 at 4:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.