wolfssh

wolfSSH supports the following RFCs:

RFC 4250 - The Secure Shell (SSH) Protocol Assigned Numbers
RFC 4251 - The Secure Shell (SSH) Protocol Architecture
RFC 4252 - The Secure Shell (SSH) Authentication Protocol
RFC 4253 - The Secure Shell (SSH) Transport Layer Protocol
RFC 4254 - The Secure Shell (SSH) Connection Protocol
RFC 4256 - Generic Message Exchange Authentication for the Secure Shell Protocol (SSH)
RFC 4344 - The Secure Shell (SSH) Transport Layer Encryption Modes
RFC 4419 - Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol
RFC 5647 - AES Galois Counter Mode for the Secure Shell Transport Layer Protocol (modified for OpenSSH's implementation)
RFC 5656 - Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer
RFC 6187 - X.509v3 Certificates for Secure Shell Authentication
RFC 6668 - SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
RFC 8268 - More Modular Exponentiation (MODP) Diffie-Hellman (DH) Key Exchange (KEX) Groups for Secure Shell (SSH)
RFC 8270 - Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits
RFC 8308 - Extension Negotiation in the Secure Shell (SSH) Protocol
RFC 8332 - Use of RSA Keys with SHA-256 and SHA-512 in the Secure Shell (SSH) Protocol
RFC 8709 - Ed25519 and Ed448 Public Key Algorithms for the Secure Shell (SSH) Protocol (Ed25519 only)
RFC 8731 - Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448 (Curve25519 only)

wolfSSH also supports the following SSH features not included in an RFC:

Post-quantum hybrid key exchange with ML-KEM per draft-ietf-sshm-mlkem-hybrid-kex
Post-quantum ML-DSA host keys and user keys per draft-sfluhrer-ssh-mldsa
Strict KEX per draft-ietf-sshm-strict-kex, compatible with OpenSSH's kex-strict-c-v00@openssh.com and kex-strict-s-v00@openssh.com
OpenSSH certificates for user authentication per draft-ietf-sshm-cert
SSH File Transfer Protocol (SFTP) is supported per Draft 2 of the unreleased RFC
Secure Copy (SCP) is supported per the blog post "How the SCP protocol works" by Jan Pechanec, archived at the Internet Archive
SSH Agent in the client and echoserver is supported per Draft 2 of the unreleased RFC

Resources

wolfSSL Website
wolfSSH Website

Contact Info

Contact wolfSSL