GitHub - djc/oxish · GitHub
/" data-turbo-transient="true" />
Skip to content
Type / to search
Sign in<br>Sign upAppearance settings
You signed in with another tab or window. Reload to refresh your session.<br>You signed out in another tab or window. Reload to refresh your session.<br>You switched accounts on another tab or window. Reload to refresh your session.
Dismiss alert
{{ message }}
djc
oxish
Public
Uh oh!
There was an error while loading. Please reload this page.
Notifications<br>You must be signed in to change notification settings
Fork
Star<br>56
main
BranchesTags
Go to file
CodeOpen more actions menu
Folders and files<br>NameNameLast commit message<br>Last commit date<br>Latest commit
History<br>456 Commits<br>456 Commits
.github
.github
fuzz
fuzz
oxish-aws-lc
oxish-aws-lc
oxish-graviola
oxish-graviola
oxish-proto
oxish-proto
oxish
oxish
.gitignore
.gitignore
CONTRIBUTING.md
CONTRIBUTING.md
Cargo.lock
Cargo.lock
Cargo.toml
Cargo.toml
LICENSE-APACHE
LICENSE-APACHE
LICENSE-MIT
LICENSE-MIT
README.md
README.md
codecov.yml
codecov.yml
deny.toml
deny.toml
dist-workspace.toml
dist-workspace.toml
openssh-vulnerabilities.md
openssh-vulnerabilities.md
View all files
Repository files navigation
OxiSH: SSH server written in Rust
OxiSH is an SSH server written in Rust. It is currently a minimum viable product and<br>not yet ready for production use. It is intended to be a secure, modern SSH server that supports post-quantum key exchange and FIPS-validated cryptography.
Please don't publicize this project at its current stage. Funding to advance its development is welcome.
Features
Only support modern cryptography, including hybrid post-quantum key exchange
Support for FIPS-validated cryptography on Linux when compiled with aws-lc-fips crypto
Usable as server and library, including sans-I/O protocol implementation
If any features you need are missing, please open an issue or submit a pull request.
Limitations
Only supports Linux and macOS for now (looking for a Windows contributor)
Only supports public key authentication for now
No SFTP support yet
Requires clients with support for mlkem768x25519-sha256 key exchange (OpenSSH 9.9+)
No support for older cryptographic algorithms
References to RFCs consulted during development
RFC 4251: The Secure Shell (SSH) Protocol Architecture
RFC 4253: The Secure Shell (SSH) Transport Layer Protocol
RFC 4254: The Secure Shell (SSH) Connection Protocol
RFC 4344: The Secure Shell (SSH) Transport Layer Encryption Modes
RFC 5647: AES Galois Counter Mode for the Secure Shell Transport Layer Protocol
RFC 5656: Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer
RFC 6668: SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
RFC 8709: Ed25519 and Ed448 Public Key Algorithms for the Secure Shell (SSH) Protocol
RFC 8731: Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448
RFC 9142: Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)
About<br>No description, website, or topics provided.<br>Resources<br>Readme<br>Apache-2.0, MIT licenses found<br>Contributing<br>Contributing<br>Activity<br>Stars<br>56 stars<br>Watchers<br>3 watching<br>Forks<br>3 forks<br>Report repository
Releases
Sponsor this project
Packages
Used by
Contributors
Languages
You can’t perform that action at this time.