The Secure Shell (SSH) Protocol Architecture
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 30
- Abstract
- The Secure Shell (SSH) Protocol is a protocol for secure remote login and other secure network services over an insecure network. This document describes the architecture of the SSH protocol, as well as the notation and terminology used in SSH protocol documents. It also discusses the SSH algorithm naming system that allows local extensions. The SSH protocol consists of three major components: The Transport Layer Protocol provides server authentication, confidentiality, and integrity with perfect forward secrecy. The User Authentication Protocol authenticates the client to the server. The Connection Protocol multiplexes the encrypted tunnel into several logical channels. Details of these protocols are described in separate documents. [STANDARDS-TRACK]
- Publication Date
- 2006-01-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC4251- Link
- https://doi.org/10.17487/RFC4251
- Author(s)
- Tatu YlonenChris M. Lonvick
- Keyword(s)
- Remote Login, SSH
Latest version of IETF RFC 4251
Document Versions — IETF RFC 4251
-
▶ IETF RFC 4251 (2006-01-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 2434 [Superseded*]
- IETF RFC 3066 [Superseded*]
- IETF RFC 3629 [Active*]
- IETF RFC 4250 [Active*]
- IETF RFC 4252 [Active*]
- IETF RFC 4253 [Active*]
- IETF RFC 4254 [Active*]
Bibliographic Reference(s)
- ANSI.T1.523.2001 — ANSI-T1.523-2001 EXTERNAL
- IETF.draft-rogaway-ipsec-comments-00 — ROGAWAY EXTERNAL
- ISBN.1555580882 — SCHEIFLER EXTERNAL
- ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
- NIST FIPS 180-2 [Withdrawn]
- NIST.FIPS.186 — DSS EXTERNAL
- NIST FIPS 197 [Superseded]
- Bellaire, M., Kohno, T., and C. Namprempre, "Authenticated Encryption in SSH: Fixing the SSH Binary Packet Protocol", Proceedings of the 9th ACM Conference on Computer and Communications Security, Sept 2002. EXTERNAL
- Solar Designer and D. Song, "SSH Traffic Analysis Attacks", Presentation given at HAL2001 and NordU2002 Conferences, Sept 2001. EXTERNAL
- Song, X.D., Wagner, D., and X. Tian, "Timing Analysis of Keystrokes and SSH Timing Attacks", Paper given at 10th USENIX Security Symposium, 2001. EXTERNAL
- Kaufman, C., Perlman, R., and M. Speciner, "Network Security: PRIVATE Communication in a PUBLIC World", Prentice Hall Publisher, 1995. EXTERNAL
- Dai, W., "An attack against SSH2 protocol", Email to the SECSH Working Group ietf-ssh@netbsd.org ftp:// ftp.ietf.org/ietf-mail-archive/secsh/2002- 02.mail, Feb 2002. EXTERNAL
- CERT Coordination Center, The., " http://www.cert.org/nav/index_red.html ". EXTERNAL
- Venema, W., "Murphy's Law and Computer Security", Proceedings of 6th USENIX Security Symposium, San Jose CA http://www.usenix.org/publications/library/ proceedings/sec96/venema.html , July 1996. EXTERNAL
- IETF RFC 822 [Superseded*]
- IETF RFC 854 [Active*]
- IETF RFC 1034 [Active*]
- IETF RFC 1282 [Active*]
- IETF RFC 1964 [Active*]
- IETF RFC 2025 [Active*]
- IETF RFC 2085 [Active*]
- IETF RFC 2104 [Active, Amended*]
- IETF RFC 2246 [Superseded*]
- IETF RFC 2410 [Active*]
- IETF RFC 2743 [Active*]
- IETF RFC 3766 [Active*]
- IETF RFC 4086 [Active*]
- IETF RFC 4120 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4251.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4251, The Secure Shell (SSH) Protocol Architecture. Available at https://doi.org/10.17487/RFC4251
Snippet:
IETF RFC 4251, The Secure Shell (SSH) Protocol Architecture. Available at https://doi.org/10.17487/RFC4251
HTML (ISO 690 compliant)
Preview:
IETF RFC 4251, The Secure Shell (SSH) Protocol Architecture. Available at https://doi.org/10.17487/RFC4251
Snippet:
<span class="citation"><cite>IETF RFC 4251</cite>, The Secure Shell (SSH) Protocol Architecture. Available at <a href="https://doi.org/10.17487/RFC4251" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4251</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4251, The Secure Shell (SSH) Protocol Architecture
doi: 10.17487/RFC4251
url: https://doi.org/10.17487/RFC4251
doi: 10.17487/RFC4251
url: https://doi.org/10.17487/RFC4251
Snippet:
<li> <cite id="bib-rfc4251">IETF RFC 4251</cite>, The Secure Shell (SSH) Protocol Architecture <span class="doi">10.17487/RFC4251</span> </li>
Referenced By
- IETF RFC 4250 [Active*]
- IETF RFC 4252 [Active*]
- IETF RFC 4253 [Active*]
- IETF RFC 4254 [Active*]
- IETF RFC 4572 [Superseded*]
- IETF RFC 4732 [Active*]
- IETF RFC 4741 [Superseded*]
- IETF RFC 5198 [Active*]
- IETF RFC 5592 [Active*]
- IETF RFC 5656 [Active*]
- IETF RFC 6241 [Active*]
- IETF RFC 6244 [Active*]
- IETF RFC 6979 [Active*]
- IETF RFC 7404 [Active*]
- IETF RFC 7435 [Active*]
- IETF RFC 7627 [Superseded*]
- IETF RFC 9141 [Active*]
- SMPTE ST 2032-1:2007 [Active, Stabilized]