openssh/openssh-portable
Openssh Portable
This project is a portable implementation of the secure shell toolset designed for deployment across diverse operating systems and platforms. It provides a suite of tools for secure remote login and command execution based on the secure shell protocol.
The implementation includes a sandboxed server that isolates processes to limit the impact of potential vulnerabilities on the host operating system. It also functions as a cryptographic key manager for generating and storing security keys to replace or supplement password-based authentication.
The project covers encrypted file transfer for moving data between hosts, system authentication integration for managing user identities and logs, and secure remote access.
Features
- Secure Remote Access - Implements the secure shell protocol to establish secure remote access for login and command execution.
- Cryptographic Key Management - Provides a cryptographic key manager for generating and storing security keys used in authentication.
- Secure File Transfer - Provides secure file transfer capabilities using encrypted protocols to ensure data integrity and privacy.
- Portable System Implementations - Provides a portable implementation of the secure shell toolset designed for deployment across diverse operating systems.
- Process Privilege Separation - Uses a privilege-separated process model to isolate privileged parents from unprivileged children.
- Key Exchange Protocols - Implements asymmetric key exchange to securely establish shared session keys without transmitting passwords.
- Cryptographic Key Management - Provides tools to generate and manage cryptographic keys for secure authentication.
- Encrypted Tunneling Protocols - Provides encrypted tunneling protocols to wrap data streams and prevent eavesdropping during transmission.
- Process Sandboxes - Isolates server processes using sandboxing to limit the impact of potential vulnerabilities on the host.
- Process Sandboxing - Implements secure process sandboxing to isolate server processes from the host operating system.
- Process Isolation - Implements a sandboxed server that isolates processes to limit the impact of potential vulnerabilities on the host operating system.
- SSH-2 Protocol Implementations - Offers a portable, full implementation of the SSH-2 protocol for secure remote communication.
- Symmetric Cipher Implementations - Implements a symmetric cipher suite for the high-speed encryption of bulk data after the handshake.
- Cross-Platform Deployment Targets - Supports cross-platform deployment by providing a portable implementation of core SSH services.
- OS Abstraction Layers - Employs an OS abstraction layer to ensure portable execution across different Unix-like operating systems.
- Pluggable Authentication Backends - Integrates with pluggable authentication backends like PAM to handle diverse identity verification methods.
- Identity Authentication - Integrates with native system authentication and auditing frameworks to manage user identities.
- System Authentication Integrations - Connects secure shell access to system authentication and auditing frameworks for user identity management.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
