Support newer SSH key types?

Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions
Goto page Previous  1, 2, 3
Author Message
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1927

PostPosted: Wed Nov 16, 2022 19:04    Post subject: Reply with quote
Alozaros wrote:
mwchang wrote:
In the future, maybe Dropbear should just be replaced by OpenSSH.


As far as my understanding goes Dropbear is smaller than OpenSSh

Correct, dropbear has a smaller footprint than OpenSSH. Also to note, WolfSSL has a smaller footprint than OpenSSL. The focus is to offer a specific set of same default features for all supported devices. Embedded Linux is not Desktop Linux.

_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
Sponsor
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1856
Location: Hung Hom, Hong Kong

PostPosted: Thu Nov 17, 2022 4:20    Post subject: Reply with quote
Alozaros wrote:
As far as my understanding goes Dropbear is smaller than OpenSSh and excellent alternative for running on routers...you can install OpenSSh via entware...(sadly entware guys dont update their packages that often any more)

you can generate key's in many different ways, using linux, puttygen or whatever...
but gen those on router side is cool future to have too...

Win 10/11 has Openssh built-in now.

Found this a bit outdated article while using Google Search. It compared Dropbear, TinySSH & OpenSSH. It's just for reference.

TinySSH vs others
* Comparison of Dropbear, OpenSSH and TinySSH
https://maruel.ca/post/tinyssh-2/

Also found an interesting fork of Dropbear:

GitHub - pts/pts-dropbear: Dropbear SSH tools with ed25519 and other improvements by pts
https://github.com/pts/pts-dropbear

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1927

PostPosted: Thu Nov 17, 2022 12:34    Post subject: Reply with quote
Where do you think ed25519 support came from in the original dropbear? An article from 2016 is not very relevant after 6 years of ongoing development.
_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
mwchang
DD-WRT Guru


Joined: 26 Mar 2013
Posts: 1856
Location: Hung Hom, Hong Kong

PostPosted: Sat Nov 19, 2022 6:32    Post subject: Reply with quote
What is the relationship between "ssh_host_ed25519_key" in /tmp/root/.ssh/ and nvram's "sshd_ed25519_host_key"?

I found they had different values. Are they just different formats of the same key?

Option "-r" for Dropbear should be specifying host key? In Dropbear format?

Code:
~# ls /tmp/root/.ssh/* -l
-r--r--r--    1 root     root           567 Nov 19 12:05 /tmp/root/.ssh/authorized_keys
-rw-------    1 root     root            83 Jan  1  1970 /tmp/root/.ssh/ssh_host_ed25519_key
root@rt-n18u:~# cat /tmp/root/.ssh/ssh_host_ed25519_key
...xxxxx...
root@rt-n18u:~#
root@rt-n18u:~# nvram get sshd_ed25519_host_key
-----BEGIN OPENSSH PRIVATE KEY-----
....yyy.....
-----END OPENSSH PRIVATE KEY-----

root@rt-n18u:~# ps | grep drop
 1xxx root     dropbear -b /tmp/loginprompt -r /tmp/root/.ssh/ssh_host_ed25519_key -p 22 -s
 2xxx root     dropbear -b /tmp/loginprompt -r /tmp/root/.ssh/ssh_host_ed25519_key -p 22 -s

_________________
Router: Asus RT-N18U (rev. A1)

Drink, Blink, Stretch! Live long and prosper! May the Force and farces be with you!

Facebook: https://www.facebook.com/changmanwai
Website: https://sites.google.com/site/changmw
SETI@Home profile: http://setiathome.berkeley.edu/view_profile.php?userid=211832
GitHub: https://github.com/changmw/changmw
ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 2967
Location: Germany

PostPosted: Sat Nov 19, 2022 8:39    Post subject: Reply with quote
Code:
dropbearconvert dropbear openssh ~/.ssh/ssh_host_ed25519_key ~/.ssh/openssh
cat ~/.ssh/openssh
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14207
Location: Texas, USA

PostPosted: Sat Nov 19, 2022 12:43    Post subject: Reply with quote
I guess nobody thought I'd ever backtrack, but I find it rather interesting that a thread linked by me in Is someone trying to hack me brute force my router? has mysteriously disappeared, and not by my human intervention, that I recall. Just a reminder, someone is *always* watching Wink Cool
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Goto page Previous  1, 2, 3 Display posts from previous:    Page 3 of 3
Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum