В OpenSSH реализованы следующие спецификации.
Указанные версии говорят о добавлении или удалении
той или иной спецификации в той или иной версии OpenSSH.
Спецификация
| Версия
| Описание
|
RFC4255
(e)
|
| Using DNS to Securely Publish SSH Key Fingerprints (SSHFP)
|
RFC4256
(e)
|
| Generic Message Exchange Authentication (aka keyboard-interactive )
|
RFC4335
(e)
|
| SSH Session Channel Break Extension
|
RFC4344
|
| SSH Transport Layer Encryption Modes (aes128-ctr ,
aes192-ctr , aes256-ctr )
|
RFC4345
(e)
| 4.1-7.6
| Improved Arcfour Modes for the SSH Transport Layer Protocol
|
RFC4419
(e)
|
| Diffie-Hellman Group Exchange
|
RFC4462
(e)
|
| GSS-API Authentication and Key Exchange (only authentication implemented)
|
RFC4716
|
| SSH Public Key File Format (import and export via
ssh-keygen only).
|
RFC5656
(e)
|
| Elliptic Curve Algorithm Integration in SSH
|
RFC6594
(e)
| 6.1-
| SHA-256 SSHFP Resource Records
|
RFC6668
| 5.9-
| SHA-2 Data Integrity Algorithms (hmac-sha2-256 ,
hmac-sha2-512 )
|
RFC7479
(e)
| 6.5-
| ED25519 SSHFP Resource Records
|
RFC8160
| 7.3-
| IUTF8 Terminal Mode
|
RFC8270
(e)
| 7.1-
| Increase Diffie-Hellman Modulus Size
|
RFC8308
| 7.2-
| Extension Negotiation in the Secure Shell (SSH) Protocol
(ext-info-s , ext-info-c )
|
RFC8332
| 7.2-
| Use of RSA Keys with SHA-2 (rsa-sha2-256 ,
rsa-sha2-512 )
|
RFC8709
(e)
| 6.5-
| Ed25519 and Ed448 Public Key Algorithms (ssh-ed25519 only)
|
RFC8731
| 7.3-
| Key Exchange Method Using Curve25519 and Curve448
(curve25519-sha256 only)
|
Спецификация
| Версия
| Описание
|
PROTOCOL
|
| An overview of all vendor extensions detailed below, and the
specifications of the following protocol extensions:
- SSH2 connection:
eow@openssh.com ,
no-more-sessions@openssh.com
hostkeys-00@openssh.com ,
hostkeys-prove-00@openssh.com (hostkey rotation)
tun@openssh.com (layer 2 and 3 tunnelling)
direct-streamlocal@openssh.com ,
forwarded-streamlocal@openssh.com ,
streamlocal-forward@openssh.com ,
cancel-streamlocal-forward@openssh.com
(Unix domain socket forwarding)
INFO@openssh.com (BSD SIGINFO)
publickey-hostbound-v00@openssh.com (host-bound
public key authentication)
- SSH2 transport ciphers:
aes128-gcm@openssh.com ,
aes256-gcm@openssh.com
- SSH2 transport MACs:
hmac-sha1-etm@openssh.com ,
hmac-sha1-96-etm@openssh.com ,
hmac-sha2-256-etm@openssh.com ,
hmac-sha2-512-etm@openssh.com ,
hmac-md5-etm@openssh.com ,
hmac-md5-96-etm@openssh.com ,
umac-64-etm@openssh.com ,
umac-128-etm@openssh.com
- SFTP:
posix-rename@openssh.com ,
statvfs@openssh.com , fstatvfs@openssh.com ,
hardlink@openssh.com , fsync@openssh.com ,
lesetstat@openssh.com , limits@openssh.com ,
expand-path@openssh.com
|
draft-miller-ssh-agent-04
|
| ssh-agent protocol (auth-agent@openssh.com )
|
PROTOCOL.certkeys
|
| ssh-rsa-cert-v01@openssh.com ,
ssh-dsa-cert-v01@openssh.com ,
ecdsa-sha2-nistp256-cert-v01@openssh.com ,
ecdsa-sha2-nistp384-cert-v01@openssh.com ,
ecdsa-sha2-nistp521-cert-v01@openssh.com ,
ssh-ed25519-cert-v01@openssh.com ,
rsa-sha2-256-cert-v01@openssh.com ,
rsa-sha2-512-cert-v01@openssh.com : new public
key algorithms supporting certificates.
|
PROTOCOL.chacha20poly1305
|
| chacha20-poly1305@openssh.com authenticated encryption mode.
|
PROTOCOL.key
|
| OpenSSH private key format (openssh-key-v1 ).
|
PROTOCOL.krl
|
| Key Revocation Lists for OpenSSH keys and certificates.
|
PROTOCOL.mux
|
| Multiplexing protocol used by ssh(1) ControlMaster connection-sharing.
|
draft-miller-secsh-umac-01
|
| Use of UMAC in SSH (umac-64@openssh.com ,
umac-128@openssh.com )
|
draft-miller-secsh-compression-delayed-00
|
| Delayed compression until after authentication
(zlib@openssh.com )
|
curve25519-sha256@libssh.org
|
| curve25519-sha256@libssh.org key exchange method. This is
identical to curve25519-sha256 as later published in
RFC8731.
|
sntrup761x25519-sha512@openssh.com
|
| sntrup761x25519-sha512@openssh.com key exchange method. This is
identical to sntrup761x25519-sha512 as later published in
the IANA Secure Shell (SSH) Protocol Parameters.
|
draft-kampanakis-curdle-pq-ssh-00
| 8.0-8.5
| Post-quantum public key algorithms
(sntrup4591761x25519-sha512@tinyssh.org )
|