SSH

SmartFTP implementira sljedeće značajke protokola Secure Shell (SSH).

Mogućnosti

Usklađenost sa sigurnosnim standardima

• NIST FIPS 203
• NIST FIPS 204
• NIST FIPS 140-2
• NIST FIPS 140-3
• NIST FIPS 186-4
• NIST FIPS 186-5
• NIST SP 800-131A, NIST SP 800-186

Provjere autentičnosti

• Lozinka
  Provjera autentičnosti korisničkim imenom/lozinkom i interaktivnim unosom putem tipkovnice. Podržava i zahtjeve poslužitelja za promjenu lozinke.
• Javni ključ
  Datoteka ključa (PuTTY, VanDyke SecureCRT, SSH.com, OpenSSH, PEM), certifikati X.509, certifikati sustava Microsoft Windows iz spremišta certifikata ili pametna kartica (PKCS #11).
• Kerberos v5 (GSSAPI/SSPI)
  Podrška za implementacije Microsoft Windows Kerberos (SSPI) i MIT Kerberos (GSSAPI).
• Na temelju glavnog računala
  Provjera autentičnosti datotekom ključa glavnog računala ili certifikatom.
• RSA SecurID
  Dvofaktorska provjera autentičnosti RSA SecurID.

Šifriranja

• AES CBC Mode (aes256-cbc, aes192-cbc, aes128-cbc) (RFC 4344)
• AES CTR Mode (aes256-ctr, aes192-ctr, aes128-ctr) (RFC 4344)
• AES GCM (aes128-gcm@openssh.com, aes256-gcm@openssh.com) (OpenSSH, draft-miller-sshm-aes-gcm)
• Triple DES (3des-cbc) (for compatibility)

Komprimiranja

• Delayed compression (zlib@openssh.com) (draft-miller-secsh-compression-delayed)
• No compression (none)

Metode razmjene ključeva

• diffie-hellman-group14-sha1 (RFC 4253) (for compatibility)
• diffie-hellman-group-exchange-sha1 (RFC 4419) (for compatibility)
• diffie-hellman-group-exchange-sha256 (RFC 4419)
• diffie-hellman-group14-sha256 (RFC 8268)
• diffie-hellman-group16-sha512 (RFC 8268)
• ecdh-sha2-nistp256 (RFC 6239)
• ecdh-sha2-nistp384 (RFC 6239)
• ecdh-sha2-nistp521 (RFC 6239)
• curve25519-sha256 (RFC 9142)
• curve25519-sha256@libssh.org (for compatibility)
• mlkem768x25519-sha256 (draft-ietf-sshm-mlkem-hybrid-kex)

Algoritmi javnog ključa

• ssh-rsa (RFC 4253)
• ssh-dss (RFC 4253) (for compatibility)
• rsa-sha2-256 (RFC 8332)
• rsa-sha2-512 (RFC 8332)
• ecdsa-sha2-nistp256 (RFC 6239)
• ecdsa-sha2-nistp384 (RFC 6239)
• ecdsa-sha2-nistp521 (RFC 6239)
• x509v3-ssh-rsa (RFC 6187)
• x509v3-rsa2048-sha256 (RFC 6187)
• x509v3-ecdsa-sha2-nistp256 (RFC 6187)
• x509v3-ecdsa-sha2-nistp384 (RFC 6187)
• x509v3-ecdsa-sha2-nistp521 (RFC 6187)
• ssh-ed25519 (RFC 8709)
• ssh-ed448 (RFC 8709)
• ssh-rsa-cert-v01@openssh.com (OpenSSH)
• ecdsa-sha2-nistp256-cert-v01@openssh.com (OpenSSH)
• ecdsa-sha2-nistp384-cert-v01@openssh.com (OpenSSH)
• ecdsa-sha2-nistp521-cert-v01@openssh.com (OpenSSH)
• rsa-sha2-256-cert-v01@openssh.com (OpenSSH)
• rsa-sha2-512-cert-v01@openssh.com (OpenSSH)
• ssh-ed25519-cert-v01@openssh.com (OpenSSH)
• ssh-mldsa-44 (draft-sfluhrer-ssh-mldsa)
• ssh-mldsa-65 (draft-sfluhrer-ssh-mldsa)
• ssh-mldsa-87 (draft-sfluhrer-ssh-mldsa)

HMACs

• hmac-sha1 (RFC 4253)
• hmac-sha2-256 (RFC 6668)
• hmac-sha2-512 (RFC 6668)
• hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com (OpenSSH)

Proširenja

• server-sig-algs (RFC 8308)
• no-flow-control (RFC 8308)
• kex-strict-c-v00@openssh.com (draft-miller-sshm-strict-kex)