>>>>> "Arvind" == rarvind <Arvind> writes:
Arvind> I have been trying to find out about
Arvind> UserPriviledgeSeparation on the ssh site. no were can i
Arvind> get more details. if you can tell me of a link, please
Arvind> direct me to it.
Arvind> also, i have a few questions on ssh.
Arvind> 1. how do i know, which encryption algo I am using. is it
Arvind> 3DES or blowfish 2. what is the strength, 1024 bits or
Arvind> less than that that my ssh is currently using. 3. when is
1 & 2. Use ssh -v, that'll tell you the encryption algorithm and
strength being used. The algorithms you're referring to are symmetric
algorithms, and won't use 1024-bit keys: more in the region of 128-256
bits.
Arvind> the private key created and public created ? 4. can i
3. Depends on whether you're referring to the server or the client. The
server keys are typically created when the server software is
installed. The client keys are created whenever you run ssh-keygen.
Arvind> generate them myself using my own key combination for
Arvind> increased security?
4, Define `my own key combination'. You can specify the number of
bits in your client key when using ssh-keygen. You cannot create a
keypair with a specific fingerprint.
Please be aware that SSH uses 3 different types of encryption
algorithms and 1 type of verification mechanism: RSA/DSA for client
and server authentication, Diffie-Hellman (or El-Gamal?) for secure
session key exchange and a symmetric algorithm like 3DES, Blowfish,
CAST or AES (Rijndael) for actual session encryption. The
verification of packets is done through an HMAC, usually HMAC-MD5 or
HMAC-SHA1.
There's lots of stuff on these available on the 'net. If you can't
locate it, let me know -- I give encryption tutorials for a nominal
fee (usual nominal fee being half your kingdom and your daughter's
hand in marriage ;-)
Arvind> this is my sshd process running root 16207 1 1 09:28 ?
Arvind> 00:00:01 /usr/sbin/sshd root 16212 16207 0 09:29 ?
Arvind> 00:00:00 /usr/sbin/sshd
Arvind> how do i know if it is in the chroot jail ?
Regards,
-- Raju
--
Raju Mathur [EMAIL PROTECTED] http://kandalaya.org/
It is the mind that moves
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a geek.
http://thinkgeek.com/sf
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help
