Comments (14)
I have ECDH using OpenSSL support done on a private fork; I just need some time to merge it back into master and create a pull request.
from libssh2.
Slightly off-thread: Will Cosgrove worked on diffie-hellman-group-exchange-sha256 support back in January:
http://www.libssh2.org/mail/libssh2-devel-archive-2015-01/0004.shtml
from libssh2.
This is getting somewhat urgent. libssh2 only supports the following key exchange protocols: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
But OpenSSH now disables diffie-hellman-group1-sha1 by default, and SHA1 in general is considered broken so the rest of libssh2's key exchange protocols are bound to follow suite. Indeed some SSH hardening guides recommend only supporting [email protected] and diffie-hellman-group-exchange-sha256, neither of which libssh2 supports.
from libssh2.
We accept pull requests as well as good old patches mailed to the mailing list.
from libssh2.
@fgouget libssh2 does support diffie-hellman-group-exchange-sha256
in the most recent version (1.7.0). The website hasn't been updated yet with this info.
@Badger Could you update the website to include this info?
from libssh2.
done!
from libssh2.
I am also looking for ECDH support in libssh2. Hope you find the time to merge back your changes :-)
from libssh2.
Any news on this, @willco007? :)
from libssh2.
@ehamberg Thanks for the reminder. I finally shipped the project I've been working on and will have some time in the coming weeks to get my changes into a pull request.
I've been continuing to work on my private fork. I've recently added OpenSSH key file format support. At this point I have diverged quite a bit from the official release (ECDHA, ED25519, ETM support, OpenSSH keys). The problems are:
- my changes are numerous; someone needs to review them for the project in a timely manor
- the crypto-related changes only work using OpenSSL
- getting someone who uses the other crypto backends to make sure they don't blow up and/or getting them ported to those backends. Any takers out there? :)
from libssh2.
I've implemented ECDH nistp384 on my local sandbox. I have tested this against openssh 7.3p1. Mine too works only with openssl. I can review the ECDH code. I've never used gcrypt etc , so I won't be of much help
from libssh2.
@prem-nm great! I'm merging my changes now and will let you know when I submit the pull request.
from libssh2.
@prem-nm have you had a chance to look over/try my pull request?
from libssh2.
@willco007 , I had a look and I have commented. Good job !
from libssh2.
ECDSA support has been merged in, closing.
from libssh2.
Related Issues (20)
- Unused code setting channel ignore mode HOT 3
- After running this code, the memory usage continuously spikes. What could be the reason? libssh2-1.10.0 HOT 9
- KEX extension indicators are lost in libssh2_session_method_pref() HOT 3
- libssh2 tests are failing HOT 1
- Encrypt-then-MAC feature should be tested in remote end's configuration when receiving data
- Fix AIX build HOT 1
- SFTP failed with the error -41 working with Openssl HOT 9
- libssh2_session_handshake() hangs HOT 3
- libssh2_session_handshake LIBSSH2_ERROR_KEY_EXCHANGE_FAILURE HOT 6
- Key exchange issue on Debian 12 (Bookworm) HOT 4
- LIBSSH2_ERROR_EAGAIN ambiguity HOT 2
- Instable connections in case of SSH transfers over nonblocking sockets HOT 7
- IPv6 format & host key validation with known_hosts file
- Memory leak in _libssh2_transport_read HOT 2
- MAXPATHLEN not defined on hurd systems HOT 4
- CMakeLists defines hidden in C flags, but doesn't define LIBSSH2_API to unhide them HOT 4
- The function "agent_sign" seems to always return ERROR HOT 2
- rcvd too much data: Occasional Duplicate Packet Sent Causing Corrupted Data HOT 3
- Password Callback Never Called Causing Invalid State and Segfaults
- session handshake fails on server banners larger than 256 bytes HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from libssh2.