Solved

Why does SSH work with no PKI and no shared secret?

Posted on 2011-09-10
2
560 Views
Last Modified: 2012-05-12
The theory behind secure protocols is - as I understand it - that they rely on symmetric or asymmetric keys.  Either a shared secret or a private/public key pair.  So a question I've had in the back of my mind for some time is:  How is it I can setup a router or firewall and enable ssh on the device and in the next moment SSH to the device from my workstation?  No Certificate Authority has been setup,  and clearly I never entered a shared key on my ssh client nor at the router/firewall.  Is the router just acting as its own CA?  Is putty or other just sending out some default public key and somewhere along the install created a private key?  It all seems to work as seamlessly as telnet.  But how??  Thanks!
0
Comment
Question by:amigan_99
2 Comments
 
LVL 6

Accepted Solution

by:
nativevlan earned 500 total points
ID: 36516985
When you enable ssh the router creates the keys and is it's own CA. That's why when you connect via putty and ssh for the first time you will get a warning about the certificate. If you are setting up ssh on a Cisco router or switch the key generation become quite obvious. "crypto key generate rsa general-use"
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 36517004
Thank you.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this increasingly digital world, security hacks are no longer just a threat, but a reality. As we've witnessed with Target's big identity hack 2013, Heartbleed in 2015, and now Cloudbleed, companies and their leaders need to prepare for the unthi…
As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question