Can someone explain the basics of private-key authentication through SSH?

lowpro2k3 · 06-08-2005, 09:41 PM

I know I could google it, but if you have -done- it before and can explain how the private key is secured on the client machine in about a paragraph, you saved me some time. Im not thinking about implementing it (yet...), I just kind of want a general idea of what its all about.

OK fine, I'll go google it too...

But if you have experience with it I wouldnt mind getting a little intro to it.

Thanks.

johnson_steve · 06-08-2005, 10:43 PM

ok you get a key pair a private and public key the private key never leaves your computer but when you ssh into another computer the public key is compaired to the authorized_keys file on the server if your public key is in that file it lets you in without a password. your keys are usualy something like:

~/.ssh/id_rsa
~/.ssh/id_rsa.pub

on the server side the authorized _keys file is in:

~/.ssh/authorized_keys

and it may have many keys one per line if you want any helpsetting this up just ask

Capt_Caveman · 06-08-2005, 11:22 PM

It's also important to note that the public and private keys are mathematically related. Here are a few links on asymetric key exchange protocols that might be helpful:

http://www.securitydocs.com/library/2978
http://www.ssh.com/support/cryptogra...symmetric.html

For a really good read, pick up a copy of Applied Cryptography.