[ale] Documentation of SSH exchange (including math)

[Richard Bronosky]

I would also suggest looking for a library that implements ssh2 in your
favorite language. You now have me curious so I'll be reading the source of
the Python and JavaScript libraries.
On Sep 2, 2012 6:21 PM, "Derek Atkins" <derek at ihtfp.com> wrote:

> Have you tried RFC4251,52,53?
>
> -derek
>
> Sent from my HTC smartphone
>
> ----- Reply message -----
> From: "Alex Carver" <agcarver+ale at acarver.net>
> To: "Atlanta Linux Enthusiasts" <ale at ale.org>
> Subject: [ale] Documentation of SSH exchange (including math)
> Date: Sun, Sep 2, 2012 6:10 PM
>
>
> Hi all,
>
> Does anyone happen to know of a site or other document that describes in
> detail (including the basic math) of the SSH2 PK authentication process?
>  All my searches describe the process of enabling PK authentication in
> the daemon and generating the keys but I'm trying to find something that
> describes the actual exchange process that identifies a user including
> the math that is used during the exchange (i.e. any intermediate
> messages being encrypted by which key, etc.)
>
> I know there is more to the exchange than just the user's private and
> public keys to reduce the possibility of MITM and replay attacks.
>
> If I have to I will just dig through the openssh source but I was hoping
> for something a bit more condensed.  I've got a crazy idea for a
> home-built project (once I scrape together the dollars) and I want to
> use PK authentication as part of it.
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20120902/632044c4/attachment.html