|
|
|
|
Home / Internet Marketing
Public-Key SSH Login
By:Bryce Whitty
SSH is a popular system allowing a remote shell (command interpreter) to be used over a secure connection. By secure, here, I mean that the connection is encrypted, authenticated and integrity checked. The encryption prevents attackers reading the contents of the data being transmitted, the authentication allows both the client and the server to be sure that they are connected to the other, and not to some intermediate system in a man-in-the-middle attack, and the integrity checking ensures that the data is not being changed during transit. Together, these three features provide a secure connection.
Even so, the password based login feature transmits your password through this link, to the remote server, where it is hashed and compared with the stored value in the password file. To many, even though the connection is encrypted, this is not satisfactory. SSH allows the use of public key authentication to login to a server. Here, you upload your public key to the server, and keep your private key on the client machine, optionally password protected so that no one can steal your private key file and use it to gain access without a password.
Now, when the SSH connection is established, the server will need to check the authentication of the client; that is, make sure it is you logging in. This was previously done by requesting your password, and comparing it against the stored password hash. Now, the server encrypts a randomly generated token against your public key, and sends this to you. The private key associated with your public key, stored in a file to which only you have access, either by password protection, filesystem permissions or other means, is the only key able to decrypt this message. Now, your SSH client will decrypt the message and send it back to the server, which compares it against the original value. In reality, the authentication is often also checked in the opposite direction, using the server’s public key, which may be stored by the client. Once the server knows you hold the private key which corresponds to the public key, it grants you access.
So, you may ask, what is the security benefit here? Well, no secret information is being transmitted. You are no longer transmitting a password, nor are you transmitting any of your private key file. You are using the keys to encrypt and decrypt a piece of random data, which works one time only. Anyone who did somehow manage to listen in on this data stream would not be able to regain access by playing back your password, or even by playing back the same data transaction, as a different value would be encrypted the next time you login, and only the private key itself can decrypt that.
Public Key authentication is supported in OpenSSH, and also in PuTTY and many other SSH systems. Check your systems documentation for details on how to use public-key based logins.
Article Source: http://www.dailynewarticles.com
Bryce Whitty owns and runs www.technibble.com”>computer repair website called www.technibble.com”>Technibble.com. A website that provides technical how-to’s for repairing your computer. Technibble also has many guides for getting into the www.technibble.com”>computer business or managing your existing one. We also cover other side topics such as Security and Software.
More Articles from Internet Marketing Category:
Dominating Clickbank In One Easy Step
Internet Marketing - It All Starts With Resell Rights
Master Resale Rights - Your Way To Online Fortunes
General Information On Web Site Promotion
Private Label Rights vs. Master Resell Rights
Enticing and Testing Your Highly Targeted Traffic
Marketing Your Affiliate Programs
Selling Video products eBay and Your Website
Internet Marketing for Money
The Importance of Business Marketing Plans
Online Marketing Information Overload – Where Do You Start?
Home Based Business Internet Marketing
Make Money Online with Long Tail Marketing
Link Marketing Solutions
Business Internet Marketing Opportunity
|
|
