Analysis of the Key Exchange method of SSH using Elliptic Curve Cryptography and a Public Key Infrastructure
| dc.contributor.advisor | Roy, DP (Professor) | |
| dc.contributor.author | Hailu, Banchi | |
| dc.date.accessioned | 2018-06-27T07:45:10Z | |
| dc.date.accessioned | 2023-11-04T15:14:50Z | |
| dc.date.available | 2018-06-27T07:45:10Z | |
| dc.date.available | 2023-11-04T15:14:50Z | |
| dc.date.issued | 2008-02 | |
| dc.description.abstract | SSH, Secure Shell, is a protocol that allows user to log into another computer, to execute commands in a remote machine, and to move files from one machine to another securely over an insecure network. It provides cryptographic authentication, encryption and data integrity to secure network communications. Negotiation of the security parameters and authentication of the peers require using public key cryptosystems. Public key operations are generally slow. In order to improve the performance of the protocol and make it applicable in both powerful and resource constrained environments Elliptic Curve Cryptography is used. In addition, since SSH uses plain public keys to authenticate a remote server, always the first time authentication is vulnerable to the Man-in-the-Middle attack. Using a public key certificate as a host key will eliminate the above vulnerability. And it requires a PKI, Public Key Infrastructure to support the certificate approach. PKI may potentially impact the performance of the security protocol. And PKI path validation techniques (certificate revocation status checking) need more storage capacity, more communication cost and more processing time. This seems to have a problem to scale with large communicating nodes. In this thesis, SSH’s key exchange handshake is implemented using java and bouncy castle cryptographic api. Performance with RSA (Rivest-Shamir-Adleman) and ECDH_ECDSA (Elliptic Curve Diffie-Hellman Elliptic Curve Digital Signature Algorithm) key exchange suites have been compared for both PKI and non-PKI authentication. Client waiting time (key exchange latency), server key exchange throughput, and revocation status message size have been measured for each key exchange suite. Simulation results show that ECC has better processing time performance and better throughput than RSA. Response time and revocation status message size are minimum when Authenticated Directories are used as a certificate status responder. Keywords used: SSH, PKI, Elliptic Curve Cryptography, ECDH, ECDSA, certificate, certificate path validation, certificate revocation status checking, key exchange handshake, authentication, Authenticated Dictionaries and RSA. | en_US |
| dc.identifier.uri | http://etd.aau.edu.et/handle/123456789/3949 | |
| dc.language.iso | en | en_US |
| dc.publisher | Addis Ababa University | en_US |
| dc.subject | Ssh | en_US |
| dc.subject | Pki | en_US |
| dc.subject | Elliptic Curve Cryptography | en_US |
| dc.subject | Ecdh | en_US |
| dc.subject | Ecdsa | en_US |
| dc.subject | Certificate | en_US |
| dc.subject | ertificate Path Validation | en_US |
| dc.subject | Certificate Revocation Status Checking | en_US |
| dc.subject | Key Exchange Handshake | en_US |
| dc.subject | Authentication | en_US |
| dc.subject | Authenticated Dictionaries and Rsa | en_US |
| dc.title | Analysis of the Key Exchange method of SSH using Elliptic Curve Cryptography and a Public Key Infrastructure | en_US |
| dc.type | Thesis | en_US |