OpenSSH is a complete implementation of the SSH protocol (version 2) for secure remote login, command execution and file transfer. It includes a client ssh and server sshd, file transfer utilities scp and sftp as well as tools for key generation (ssh-keygen), run-time key storage (ssh-agent) and a number of supporting programs.
This repository serves as a prototype implementation for PSI authentication in OpenSSH. See our paper for more details.
- To enable PSI authentication on the server, set the option
PsiAuthentication yesin thesshd_configfile. - You can start sshd as you normally would (e.g.
# /usr/sbin/sshd -D).
- Start the ssh-agent:
eval $(ssh-agent -s) - Generate a key (or use existing ones):
ssh-keygen -t ed22519 - Add keys to the agent:
ssh-add ~/.ssh/id_ed25519 - Connect with
ssh user@domain
Containerization of the server/client for easy installation and testing is work in progress.
The official documentation for OpenSSH are the man pages for each tool:
Portable OpenSSH is built using autoconf and make. It requires a working C compiler, standard library and headers.
libcrypto from either LibreSSL or OpenSSL may also be used, but OpenSSH may be built without it supporting a subset of crypto algorithms.
zlib is optional; without it transport compression is not supported.
FIDO security token support needs libfido2 and its dependencies. Also, certain platforms and build-time options may require additional dependencies; see README.platform for details.
There are a few additional dependencies for installation