Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add strict kex #104

Closed
wants to merge 1 commit into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions _data/specs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -432,6 +432,9 @@ openssh:
#- [email protected] # Undocumented? openssh/myproposal.h
kex:
- [email protected] # see also https://www.openssh.com/txt/release-9.0
extension:
- [email protected]
- [email protected]

openssh-chacha:
name: OpenSSH
Expand Down
4 changes: 3 additions & 1 deletion _impls/absolutetelnet.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,9 @@ protocols:
- keyboard-interactive
- gssapi-with-mic
- hostbased

extension:
- [email protected] # since 12.11
- [email protected] # since 12.11

# X11 forwarding, Port forwarding, sftp client, telnet client
---
Expand Down
7 changes: 5 additions & 2 deletions _impls/apache-sshd.md
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ protocols:
- hmac-md5
- hmac-sha1
- hmac-sha2-256
- hmac-sha2-512 # was brokeb before 1.1.0
- hmac-sha2-512 # was brokeb before 1.1.0
- hmac-sha1-96
- hmac-md5-96
- [email protected]
Expand All @@ -74,6 +74,9 @@ protocols:
- keyboard-interactive
- password
- publickey
- gssapi-with-mic # only OID 1.2.840.113554.1.2.2 / Kerberos
- gssapi-with-mic # only OID 1.2.840.113554.1.2.2 / Kerberos
extension:
- [email protected] # since 2.12.0
- [email protected] # since 2.12.0
---
* Pure Java implementation.
2 changes: 2 additions & 0 deletions _impls/asyncssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -153,6 +153,8 @@ protocols:
- password
extension:
- server-sig-algs # since 1.7.0
- [email protected] # since 2.14.2
- [email protected] # since 2.14.2

first_kex_packet_follows: 1
---
Expand Down
2 changes: 2 additions & 0 deletions _impls/bitvise.md
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,8 @@ protocols:
extension:
- elevation
- server-sig-algs
- [email protected] # since 9.33
- [email protected] # since 9.33

# The following information was provided by denis bider.
#
Expand Down
2 changes: 2 additions & 0 deletions _impls/connectbot.md
Original file line number Diff line number Diff line change
Expand Up @@ -62,6 +62,8 @@ protocols:
- publickey
extension:
- server-sig-algs
- [email protected] # since 1.9.10
- [email protected] # since 1.9.10

first_kex_packet_follows: 0
ident: " SSH-2.0-TrileadSSH2Java_213"
Expand Down
2 changes: 2 additions & 0 deletions _impls/cyclonessh.md
Original file line number Diff line number Diff line change
Expand Up @@ -127,6 +127,8 @@ protocols:
extension:
- server-sig-algs
- global-requests-ok
- [email protected] # since 2.3.4
- [email protected] # since 2.3.4

first_kex_packet_follows: 0
---
Expand Down
3 changes: 3 additions & 0 deletions _impls/erlang.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,9 @@ protocols:
- keyboard-interactive
extension:
- server-sig-algs # since 4.5
extension:
- [email protected] # since 26.2.1 / 25.3.2.8 / 24.3.4.15
- [email protected] # since 26.2.1 / 25.3.2.8 / 24.3.4.15
---
* Server and client implementation (and library) for the
[Erlang](http://www.erlang.org/) programming language.
Expand Down
2 changes: 2 additions & 0 deletions _impls/flowssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,8 @@ protocols:
extension:
- elevation
- server-sig-algs
- [email protected] # since 9.32
- [email protected] # since 9.32
---
* Bitvise FlowSshC/Cpp/Net is a SSH library for C, C++, and .NET.
* 2015-07-10: The information provided here is based on the FlowSshC.h header file,
Expand Down
2 changes: 2 additions & 0 deletions _impls/jsch.md
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,8 @@ protocols:
- publickey
extension:
- server-sig-algs
- [email protected] # since 0.2.15
- [email protected] # since 0.2.15
---
* Pure Java implementation.
* This is a fork of the original [JSch project](https://sourceforge.net/projects/jsch/)
3 changes: 3 additions & 0 deletions _impls/libssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,6 +80,9 @@ protocols:
- hostbased
- keyboard-interactive
- gssapi-with-mic
extension:
- [email protected] # since 0.10.6 / 0.9.8
- [email protected] # since 0.10.6 / 0.9.8
---
* Mulitplatform C library for clients and servers.
* Not to be confused with the unrelated [libssh2](/impls/libssh2.html)
2 changes: 2 additions & 0 deletions _impls/openssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,8 @@ protocols:
- hostbased
extension:
- server-sig-algs # since 7.2
- [email protected] # since 9.6
- [email protected] # since 9.6

first_kex_packet_follows: 0
---
Expand Down
3 changes: 3 additions & 0 deletions _impls/paramiko.md
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,9 @@ protocols:
- keyboard-interactive
- gssapi-with-mic # since 1.15.0 (2014-09-18) # only OID 1.2.840.113554.1.2.2 / Kerberos
- gssapi-keyex # since 1.15.0 (2014-09-18)
extension:
- [email protected] # since 3.4.0
- [email protected] # since 3.4.0
---
* [Python](https://www.python.org/) library.
* Built on [PyCrypto](http://pycrypto.org/), a Python C extension for low level cryptography.
3 changes: 3 additions & 0 deletions _impls/phpseclib.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,5 +81,8 @@ protocols:
- keyboard-interactive
- publickey
- password
extension:
- [email protected] # since 3.0.35 / 2.0.46 / 1.0.22
- [email protected] # since 3.0.35 / 2.0.46 / 1.0.22
---
* Pure PHP implementation.
3 changes: 3 additions & 0 deletions _impls/putty.md
Original file line number Diff line number Diff line change
Expand Up @@ -76,5 +76,8 @@ protocols:
- password
- keyboard-interactive
- gssapi-with-mic
extension:
- [email protected] # since 0.80
- [email protected] # since 0.80
---
* [Wikipedia](https://en.wikipedia.org/wiki/PuTTY)
4 changes: 3 additions & 1 deletion _impls/securecrt.md
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,9 @@ protocols:
- keyboard-interactive
- gssapi-with-mic
- gssapi-keyex

extension:
- [email protected] # since 9.4.3
- [email protected] # since 9.4.3

#[email protected]
#[email protected]
Expand Down
2 changes: 2 additions & 0 deletions _impls/smartftp.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,6 +69,8 @@ protocols:
extension:
- server-sig-algs
- no-flow-control
- [email protected] # since 10.0.3190
- [email protected] # since 10.0.3190
---
* Windows client.
* Supports FTP, FTPS, SFTP, WebDAV, S3, Google Drive, Microsoft OneDrive, Backblaze, SSH, Terminal client.
Expand Down
3 changes: 3 additions & 0 deletions _impls/sshj.md
Original file line number Diff line number Diff line change
Expand Up @@ -108,5 +108,8 @@ protocols:
- keyboard-interactive
- gssapi-with-mic
- hostbased
extension:
- [email protected] # since 0.38.0
- [email protected] # since 0.38.0
---
* Pure Java implementation.
3 changes: 3 additions & 0 deletions _impls/tectia-ssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -98,6 +98,9 @@ protocols:
#- RSA SecurID # through keyboard-interactive
#- RADIUS # through keyboard-interactive
#- LAM # through keyboard-interactive / AIX only
extension:
- [email protected] # since 6.6.3
- [email protected] # since 6.6.3
---
* Formerly known as just "SSH" or "ssh.com"
* Strictly speaking, the Tectica SSH client and server are two separate
Expand Down
4 changes: 3 additions & 1 deletion _impls/thrussh.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,8 @@ protocols:
- password
- keyboard-interactive
- hostbased

extension:
- [email protected] # since 0.35.1
- [email protected] # since 0.35.1
---
* Multiplatform Rust library for clients and servers.
3 changes: 3 additions & 0 deletions _impls/tinyssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,5 +33,8 @@ protocols:
- hmac-sha2-256
userauth:
- publickey
extension:
- [email protected] # since 20240101
- [email protected] # since 20240101
---
* Minimalistic SSH implementation, still in alpha stage.
3 changes: 3 additions & 0 deletions _impls/ttssh2.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,6 +72,9 @@ protocols:
- password
- publickey
- keyboard-interactive
extension:
- [email protected] # since 5.1 / 4.108
- [email protected] # since 5.1 / 4.108

ident: "SSH-2.0-TTSSH/2.75 Win32"
---
Expand Down
3 changes: 3 additions & 0 deletions _impls/webssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,9 @@ protocols:
- keyboard-interactive
- publickey
- password
extension:
- [email protected] # since 24.8
- [email protected] # since 24.8

first_kex_packet_follows: 0
ident: "SSH-2.0-PuTTY_Release_0.63"
Expand Down
3 changes: 3 additions & 0 deletions _impls/xshell.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,6 +69,9 @@ protocols:
- gssapi-with-mic
- password
- keyboard-interactive
extension:
- [email protected] # since version 0144
- [email protected] # since version 0144

first_kex_packet_follows: 0
ident: "SSH-2.0-nsssh2_5.0.0030 NetSarang Computer, Inc."
Expand Down