Session regotiation option

From: Sood, Sanjeev (sanjeev.sood_at_intel.com)
Date: 05/02/05

  • Next message: Robert L Sowders: "Re: security advice" 
    Date: Sun, 1 May 2005 20:04:30 -0700
To: <secureshell@securityfocus.com>

    We have a networking application that we would like to secure (authentication, encryption, and integrity) using port forwarding feature of SSH. In some rare customer setup where they have a private trusted network, we would still like to use ssh for user authentication, port forwarding to connect to the application. However, we would like to switch to none cipher & mac mode after authentication is done if this is possible.
     
    We understand that the primary purpose of SSH is to provide a secure session/tunnel, but in some instances, our application can run on a slow 100Mhz micro-controller and we would like to avoid the overhead of encryption & mac if possible.
     
    My questions are follows:
    * Does SSH protocol have an option to re-negotiate the ciphers during a session (just like SSL/TLS)?
    * If so, does OpenSSH client support this option if our SSH server sends a renegotiate option during a session?
    * Any other suggestions to switch to plain security mode after client authentication (password based authentication)
     
    Thank you very much and regards,
    -Sanjeev Sood
     

  • Next message: Robert L Sowders: "Re: security advice"

    Relevant Pages

    • Re: [kde-linux] Sessions names
      ... ssh 192.168.2.80??? ... You can write a wrapper script that would start ssh to some ip and rename the ... konsole session dynamically. ... dcop call to konsole you need to know the pid of konsole. ...
      (KDE)
    • RE: unexplained pausing/freezing of SSH Terminal Sessions ?
      ... Do you use expect to initiate your SSH connections? ... i'm having an SSH Terminal Session "issue". ... These machines define an internal/private ...
      (SSH)
    • Sun_SSH_1.0
      ... I have a problem with Sun's SSH. ... or one SUN_SSH_1.0 session talk to an OpenSSH session. ... This e-mail and any attachments are confidential and may contain legally ...
      (SunManagers)
    • Re: Is there a way to speed up and resume a SSH X forwarding session from a disconnection?
      ... there were to be a disconnection, is it possible to resume the SSH X ... Or do I have to make a new session ... you set DISPLAY to that pseudo-display, and all X apps are directed ... impossible to switch X clients from one display to another otherwise. ...
      (comp.os.linux.x)
    • SSH connection thru corporate firewall to home sshd on Port 80
      ... I have a FreeBSD server running sshd listening on port 80 at home. ... I can successfully establish a ssh session from a Winnt/putty:80 box the ... When I take the same Winnt machine behind a corporate firewall which passes ...
      (comp.security.ssh)