Basics of key authentication

From: OpticTygre (optictygre_at_adelphia.net)
Date: 07/25/04

  • Next message: Anne & Lynn Wheeler: "Re: Basics of key authentication" 
    Date: Sun, 25 Jul 2004 00:37:43 -0400

    Ok, so everything I've read basically tells me the client creates a public
    and private key. The public key gets copied to the server, and when the
    client wants to log in, the server encrypts some message with the public
    key, and the client decrypts it with its private key to prove he is who he
    says he is. Is that right so far?

    Alright, if that's ok, then I have a few questions.

    1. A server can have tons of public keys stored on it. How does he know
    which public key to encrypt the message with for the client?

    2. In the process of public / private key authentication for logins, what
    is the order things are typically done? IE:
        a. client says "hey, I want to connect"
        b. client sends a message encrypted with private key
        c. server decrypts through list of public keys
        etc..... (I'm sure the above isn't right)

    In other words, what's the step-by-step process used for authenticating via
    public/private keys between client and server? Thanks for helping to clear
    things up.

    -Jason

  • Next message: Anne & Lynn Wheeler: "Re: Basics of key authentication"

    Relevant Pages

    • Re: TIPS FOR THE NEWCOMER
      ... As long as the private key is readable by the ssh client when it comes ... When the ssh client connects to the server, ... private key which matches the public key. ...
      (SSH)
    • Re: Explanation of SSH
      ... I am still unclear on how SSH works exactly. ... Client issues SSH command and names server ... "Shopper" says "server sends back its public host and server keys ... Surely there is only one public key it sends ...
      (comp.security.ssh)
    • [NT] Dark Age of Camelot Man-In-The-Middle
      ... use of RSA public key cryptography and an RC4 based symmetric algorithm. ... Seeing the imminent release of code for cracking the game client (which ... At the beginning of each TCP session, the server sends a 1536 bit RSA ... void bytes_out(unsigned char *data, int len) ...
      (Securiteam)
    • Re: Debian SSH server configuration
      ... I would like to configure a Debian server to only allow clients to ssh ... I don't want any client computers to be able to ssh into ... It sounds like what you are asking for is host based authentication, ... where the server check to make sure that it has the host public key ...
      (Debian-User)
    • Re: Basics of key authentication
      ... The public key gets copied to the server, ... and the client decrypts it with its private key to prove he is who he ... and the digital signature to the server. ...
      (comp.security.ssh)
    • Quantcast