An SSH server that knows who you are

Re:An SSH server that knows who you are by dependenttypes on Monday February 17, 2020 @01:12AM (#22345919)

In theory there is a way to do it without needing to have IdentitiesOnly yes. That is, if ssh did something like:

    server -> user: nonce
    user   -> server: nonce2, h(nonce || nonce2 || publickey) (for every publickey)

or alternatively

    user -> server: nonce
    server -> user: nonce2, h(nonce || nonce2 || publickey) (for every publickey)

It would still leak the amount of keys (for the user for the 1st protocol and for the server for the second) but nothing about them. (I would also suggest using a modern hash function for h, such as blake(2) or sha3)

There should be a way to extend this protocol as to not leak the amount of keys.

[ Parent | on HN ]

Re:An SSH server that knows who you are by fazilakhtar on Monday February 17, 2020 @04:23AM (#22346501)

Look at kssh (Keybase SSH)

[ Parent | on HN ]

Re:An SSH server that knows who you are by dependenttypes on Wednesday February 19, 2020 @03:34AM (#22363934)

this will actually not work. this is why you should not make your own crypto protocols in production if you are not an expert and/or if you have not proven them correct.

[ Parent | on HN ]