\documentclass{beamer}

%     Copyright (c)  2001,2002,2003,2004,2005  Alexandre Dulaunoy <adulau@foo.be>
%     Permission is granted to copy, distribute and/or modify this document
%     under the terms of the GNU General Public License, Version 2.0
%     or any later version published by the Free Software Foundation;


%\usetheme{PaloAlto}
\usetheme{Goettingen}
\usepackage[english]{babel}
\usepackage[latin1]{inputenc}
\setbeamertemplate{blocks}[rounded][shadow=true]
\setbeamercovered{transparent}


%
% The following info should normally be given in you main file:
%


\title{OpenSSH}
\subtitle {}
\keywords {SSH protocols and OpenSSH implementation}
\subject {Overview of SSH and basic introduction regarding OpenSSH}
\author{}
\institute{
  ASBL CSRRT-LU (Computer Security Research and Response Team Luxembourg)\\
  http://www.csrrt.org/}


\begin{document}


\frame{\titlepage}

\section*{SSH Protocol}

\subsection{History}

\frame[containsverbatim]{
  \nameslide{SSH - History}
  \frametitle{SSH - History}
  
 \begin{itemize}
\item 1995 Tatu Ylonen releases ssh-1.0.0 (Forms SSH Communications Security)

\item 1997 IETF secsh working group formed - Work on SSH protocol v2 begun

\item 1999 OpenSSH project started, based on open-source ssh-1.x code

\item 2000 SSH protocol v2 support added to OpenSSH

\item 2002 SSH support added to Solaris 9 (OpenSSH derived)
\item SSH protocol v2 nears release as IETF RFC
\item 2006 RFC released for SSH protocol v2 as secsh
 \end{itemize}


}

\subsection{SSH Operation and Protocol}

\frame[containsverbatim]{
  \nameslide{SSH Operation and Protocol}
  \frametitle{SSH Operation and Protocol}
  \begin{itemize}
    \item Runs on TCP port 22, initiated by client
    \item Client and server exchange banners at connect time:
\begin{itemize}
\item SSH-1.5-SoftwareName	-- SSH protocol v.1
\item SSH-2.0-SoftwareName	-- SSH protocol v.2
\item SSH-1.99-SoftwareName	-- both protocols
\end{itemize}
    \item SoftwareName is the implementation name and version
    \item Usually used for backwards (bug) compatibility
    \item Server always has a public/private key pair
    \item Public key is sent during connection setup
    \item Server's public key is cached by client to detect MITM
  \end{itemize}

}



\subsection{SSH Protocol v1}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v1}
  \frametitle{SSH Protocol v1}

  \begin{itemize}

  \item SSH protocol v.1 is the original version released in the free ssh-1.x code by Tatu Ylonen

   \item Revised between 1995 and 1997
   \item Final version of the protocol is officially "1.5"

   \item Never standardised
   \item Some desire to have it published as an informational RFC
  \item Monolithic protocol
  \end{itemize}
}


\subsection{SSH Protocol v2}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v2}
  \frametitle{SSH Protocol v2}

  \begin{itemize}

  \item Unlike the monolithic v1 protocol SSH v2 is several protocols

   \item Transport protocol
   \begin {itemize}
   \item Underlying protocol
   \item Handles encryption, compression, integrity
   \item Provides "services" based on text strings
   \end {itemize}
   \item User Authentication protocol
   \begin {itemize}
   \item Responsible for authentication of user to server
   \item Supports various authentication methods
   \item Password, Public key, Challenge-response, Host based
   \end {itemize}
   \item Connection protocol
   \begin {itemize}
   \item Interactive logins, Command execution, Port forwarding, X11 forwarding
   \end {itemize}
  \end{itemize}
}


\subsection{SSH Protocol v2 - packet format}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v2 - packet format}
  \frametitle{SSH Protocol v2 - packet format}

  \begin{itemize}
   \item 4 bytes		Packet length
   \item 1 byte		Padding length
   \item ...			Payload
   \item paddinglen	Random padding
   \item ...			MAC[seqno, packet (sans MAC)]
  \end{itemize}
}

\subsection{SSH Protocol v2 - packet format}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v2 - packet format}
  \frametitle{SSH Protocol v2 - packet format}

  \begin{itemize}
  \item Multiple MAC algorithms supported
  \begin{itemize}
  \item hmac-md5, hmac-sha1, truncated MACs, none
  \end{itemize}
  \item Payload may optionally be compressed prior to MAC

  \item Packets are optionally encrypted with a symmetric cipher
  \begin{itemize}
  \item 3-des-cbc (MUST)
  \item blowfish-cbc (RECOMMENDED)
  \item twofish-cbc, aes-cbc, serpent-cbc (OPTIONAL)
  \item arcfour, idea-cbc, cast128-cbc (OPTIONAL)
  \end{itemize}
  \end{itemize}
}


\subsection{SSH Protocol v2 - protocol start}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v2 - protocol start}
  \frametitle{SSH Protocol v2 - protocol start}

  \begin{itemize}
  \item Server and client exchange banners

\item Client and server both send MSGKEXINIT packet
\begin{itemize}
\item Random nonce
\item Supported/Allowed algorithms to use for key exchange
\item Supported/Allowed server host key formats
\item Supported/Allowed symmetric algorithms (both ways)
\item Supported/Allowed MAC algorithms
\item Supported/Allowed compression algorithms
\item Supported/Allowed languages
\item Flag indicating "KEX guess"
\end{itemize}
\item The Supported/Allowed lists are comma-separated strings
\begin {itemize}
\item E.g. "aes128-cbc, 3des-cbc, arcfour"
\end{itemize}
  \end{itemize}
}

\subsection{SSH Protocol v2 - protocol exchange}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v2 - protocol exchange}
  \frametitle{SSH Protocol v2 - protocol exchange}

\begin{itemize}
 \item Upon receipt of KEXINIT packet, both client and server
  \begin{itemize}
    \item Calculate intersection of supported/allowed ciphers, etc
    \item Run selected key exchange algorithm
    \item Usually Diffie Hellman
  \end{itemize}
 \item D-H key exchange
\item Secure way for two parties to derive a shared key
\begin {itemize}
\item Safe against eavesdroppers
\item Perfect Forward Secrecy
\end {itemize}
\item Exchange is authenticated with hash of 
\begin {itemize}
\item Client / server version strings
\item Payloads of client / server KEXINIT packets
\item Server host key
\item Intermediate D-H exchange values
\item Derived shared secret
\end{itemize}
\end{itemize}
}

\subsection{SSH Protocol v2 - protocol exchange}

\frame[containsverbatim]{
  \nameslide{SSH Protocol v2 - protocol exchange}
  \frametitle{SSH Protocol v2 - protocol exchange}
\begin{itemize}
\item Output from key exchange is two keys:
\begin{itemize}
\item Server to client
\item Client to server
\end{itemize}
\item The client/server may have different options. e.g.
\begin{itemize}
\item client may send data encrypted with 3des-cbc, no compression
\item server may send data encrypted with arcfour, zlib compression
\end{itemize}
\item MSGKEXINIT may be sent at any time during session
\item "Re-keying" may change compression, ciphers as well as keys
\item Once keyed, protocol moves on to authentication
\end{itemize}

}

\subsection{SSH Protocol TP}

\frame[containsverbatim]{
  \nameslide{SSH Protocol / OpenSSH TP}
  \frametitle{SSH Protocol / OpenSSH TP}

\begin{itemize}
\item Analyze a SSH communication stream with a simple password authentication (using Ethereal + debug mode of OpenSSH)
\item Using the OpenVPN setup of the previous TP, authenticate a user (with an OpenSSH RSA public key) using OpenSSH to your server inside a VPN connection
\begin {itemize}
\item Be aware that the keys scheme and authentication used in OpenVPN is different in OpenSSH...
\end{itemize}
\end{itemize}
}

\section*{Q and A}

\frame {

\nameslide {Q and A}
 \frametitle {Q and A}

\begin{itemize}
\item Thanks for listening.
\item http://www.csrrt.org.lu/
\item adulau@foo.be
\end{itemize}
%%\includegraphics[scale=0.50]{Hack2005lu-banner.png}
}

\end{document}