When I try to connect to my SSH remotely, will the password I send to authenticate my user account be encrypted when it's transferred over the internet?
2
-
This appears to be a duplicate of stackoverflow.com/questions/6580978/… Short answer: The password will be encrypted.– ChrisInEdmontonAug 14, 2013 at 18:04
-
I'm not sure if SSH uses Diffie Hellman but it's an example of how an encrypted session can be setup over a insecure channel. en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange– LawrenceCAug 16, 2013 at 16:04
Add a comment
|
1 Answer
Yes, the password sent will be encrypted. In the bootstrapping phase of the SSH session the SSH server sends the client its public key which the client uses to encrypt the key to some symmetric cipher. The client then sends that cipher key to the server. The server uses its private key to decrypt the cipher key. The client and server encrypt all data over the connection using the key and symmetric cipher thereafter.
answered Aug 14, 2013 at 18:35
