go_sshkeys/encrypted.adoc at master

r00t2/go_sshkeys

Fork 0

brent s 1c70a0d0d4

finally fixed all indents in SSH ref

2022-03-07 03:42:09 -05:00

18 KiB

Raw Permalink Blame History

v1 (Encrypted)

Tip

Currently, the only supported KDF is bcrypt_pbkdf (bcrypt).

See the following for more details:

Tip

You can get a list of supported ciphers (1.0.0) via ssh -Q cipher on most systems. Note that 1.0.0 has nothing to do with SSH connections themselves; it’s only for the encryption of 4.0.1.

This is likely going to be:

3des-cbc
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-cbc@lysator.liu.se (may not be present on all systems)
aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm@openssh.com
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com

The author recommends using aes256-ctr. It is currently the upstream default.

Structure

0.0 "openssh-key-v1" string plus terminating nullbyte (15 bytes)
1.0 uint32 allocator for 1.0.0 (4 bytes)
    1.0.0 cipher name string (ASCII bytes)
2.0 uint32 allocator for 2.0.0
    2.0.0 KDF name string (ASCII bytes)
3.0 uint32 allocator for KDF options (3.0.0 to 3.0.1) (4 bytes)
    3.0.0 uint32 allocator for 3.0.0.0 (4 bytes)
        3.0.0.0 Salt/IV (bytes)
    3.0.1 uint32 for number of rounds/"work factor" (4 bytes)
4.0 uint32 counter for # of keys (4 bytes)
    4.0.0 uint32 allocator for public key #n (4.0.0.0 to 4.0.0.1) (4 bytes)
        4.0.0.0 uint32 allocator for 4.0.0.0.0 (4 bytes)
            4.0.0.0.0 public key #n keytype string (ASCII bytes)
        4.0.0.1 uint32 allocator for 4.0.0.1.0 (4 bytes)
            4.0.0.1.0 public exponent ('e')
        4.0.0.2 uint32 allocator for 4.0.0.2.0 (4 bytes)
            4.0.0.2.0 modulus ('n')
    4.0.1 uint32 allocator for encrypted private key structure blob #n (4.0.1.0) (4 bytes)
        4.0.1.0 <ENCRYPTED BLOB>

Note	Chunk 4.0: This is technically currently unused; upstream hardcodes to 1 (left zero-padded 0x01). Chunk 4.0.1.0: When decrypted, this is equivalent to the plaintext 4.0.1.0 to 4.0.1.10. It uses a padded size appropriate to the encryption cipher used.

Example

The following example, being encrypted, is protected with a passphrase. The passphrase used in this example key is test.

id_rsa Format

Structure Reference (Hex) (Decoded Base64)

0.0 6f70656e7373682d6b65792d763100 ("openssh-key-v1" + 0x00)
1.0 0000000a (10)
    1.0.0 6165733235362d637472 ("aes256-ctr")
2.0 00000006 (6)
    2.0.0 626372797074 ("bcrypt")
3.0 00000018 (24)
    3.0.0 00000010 (16)
        3.0.0.0 07d4b07c0b128348916488008d6e130b (bytes)
    3.0.1 00000064 (100)
4.0 00000001 (1)
    4.0.0 00000217 (535)
        4.0.0.0 00000007 (7)
            4.0.0.0.0 7373682d727361 ("ssh-rsa")
        4.0.0.1 00000003 (3)
            4.0.0.1.0 010001 (65537)
        4.0.0.2 00000201 (513)
            4.0.0.2.0 00b7cec04601ce2a12f0c924cb9a30eb990066812cb14369193f30b2b9fdd4af
                      cb300c918f2a77d64410f3617ae7c8ca318c257d3c4df4e2c4108bbbe93a8689
                      4ba14b3575f2f72150bc381dcbfb742c7a196866fd3184ace96761adda0fc299
                      2f6c866d7569919fc22d9c4bf0de405a8c76d519aa2a5329dc6825777229a5d0
                      b753a7825a89b95275f9c025e215343c6c88cd6690a221f8ae9ef675ee464dc7
                      d118da410507ea5d6b6489dd60afd8a6646492db3e279f1a78240db8abbda6c5
                      0714c9636650a72081e7fa5d472c1428b07eae5d15b64ea1e2a7508512fe9ab6
                      55f86a313486d3cca1dd8e90acc5c9fba4d6e767507fbab9f3a7f68c748142af
                      2a3701d31a8a9b7511958aa77187ba702ed934d385afcee42380e95e0e7e9bc0
                      f4d23367fc770374167b7f0926fb6fdb6d05aad1cfd191824845b014e18153bf
                      0d1d3c3b1fadbb25a3f1d151f9b684633d8c1690fcd8cad05aac2aeb23dbf19a
                      37e480a008910319c116d47bd924b39942543b88a0f6127952b2d8e1290f3029
                      f542aebe9c0c8e36cf3296865cd6643c8924d566ebf4971809399a1ac096fe1e
                      dc3b5f871bf5ef0b4d44e0ea27620d205142e0bfcf677b4db025532121a3f074
                      5aa4d0586331733257855a5cecbe3ac4403d04ff0cc0c58b7c04904b402125c2
                      bc2a63a20ebb309cc6f3e65db301a058b8dace07e71b38f3f3595433f69b198f
                      07 (bytes)
    4.0.1 00000750 (1872)
        4.0.1.0 966e2ce435242fef09787f6e8d93a563092e3f3bc986b44198c81e8049c5c944
                419effc0521401dc1ef5bc0e4d6aedeb7d05880bc3f731698b9bceeceae08e5e
                05f79f4d22de953c899c3271850e80e804f9b1a79bcec31bba11c08db60f9bd2
                206bc3d7bfef74895e4f4e3720649f924544f4a2cea5b9dfb9cc0a2bd8f3ba70
                f4ba2e7f42960465c9eade118630f9c832fe84ef548529979d0d6ea079f9d5c4
                0e396b098fc509448d26de3cb484b0334afacaba371b52c37c120a5623170c1d
                0a39348a151c9fb8aab1049f52cf0c08c77144af314259a90848f3dc62e5831f
                ac08720b1c813506f1db1e7940def52dc46c97d6363cda0ff7e2258e2637d2e0
                9f26099bbfeac78819198b78374d2424537fe549a2ab3dddaf5f7fdb739c3921
                064b04f6ffcfeb5544db533179038e11d0cc622992bc6d0600584d4068a2891d
                c748c9c16be32c2a08e96caa2ddec4ddd1a2ab3b018a0b0f166a15ac870a30c8
                0cc897dbf15af7e8c2915b3616f237a6646e43c665f7569a5ed1850ad8cd0540
                06d389568db55393e780e752ace8f06b70f1e99d86b9445d9c1a7a6476bcbf48
                4400a58e5a5a73d2c20d630a9985bbf4c691abb61ee4515aa64a727e7bac4a5e
                d7bb5f767c7dcf0035904231283d92445863702a995e792bde1d5ac7dd624898
                7b9fe4b0a6f1837ce4fbaa032ff4671a86be8c7e4f9be3718212ead0a6f1b429
                88863bf80af17a9814f1ffbed6c81e7f59de5b8c71b9f571fc556cc56aee22be
                1b57d48f8ca76a379847c67d0ceb43ead101355e541a57c254ae814f058a0361
                92f49d96236c88428e5f54dafefd1a5b8ca12d85cf3833d38d816c6e0e205143
                f33e353c471abc978d28d1ac89a724d5aab3e7c48015c5cd3a6f31c258cef131
                2574e692c6e495a2a8efbee785a9fe1c727379ea1fdc5b492a83a4aff7b3945a
                ef503a95dc52b21474172bb54054b106342f2bde6bc38ad166c1a5c6d88685b8
                067f529741b36991352d5df1291b9e3c746a71e2bda796fdddac29d0e2f3fadf
                d1f0fd33da75bc6151d3ee27f6199e76c3b9e872fb63b54ad78b0fbe2be84f10
                d7e48339c6e63364507074addc5a2bd8c4be5848c291bdb2740d3aa325c35039
                6ce28e086eecdd6256f48fb7947b84e85759b1c7e6dd91223e3f828e4253a7ec
                6d987ad61bd2179c229a20e8d97e6158cb0be734227698b4695c784c463cac3e
                a7d538056d5062a895f8ae64549bd58484a60363ab81bc43e6fde0ee12477051
                b53c970f063df2f0ff2fd655b7f81029be545cc841f7321d31304eeba210fdf8
                fdad7e1bc8accd4d990c058b30817e85e2c5695ab92c1e129ac7471f338fdd39
                4ede16071450c19061e07c135cbe87f01260b36206cbc169c85b9dda26fb3dff
                5e7d68fd51a573402dbcc1dc7f49a1cb9c34100b9b3d0bb8b8639c69c7d47490
                ab83c8918ad03ae62eee43165e452f854d8d4132186c21f742ee4a3cc614515a
                dc7c08940838538503f5c4d5781e984cad93cf7a8d17a68d678b3466afbae362
                055d5b6edb0007b59231d3040dbfec8b9782b39c391116f2037e218bfaba46c5
                2c56180aeef241d918f214b0b6480b7382875ad9dace4496c3682ea2a697b5fe
                43b107d93e1976b2540dbfda2ae223bc1a84d65e0d6702513b8cc442a25fb983
                aadfa492d09e3dfd991f9f47470bb73369f634dd50dab26d129c3ba096ad7971
                1f0ee4419c1226eb8da42674b2cf77e8f4a3f76ce9e9e249b4d1fcc778ef318d
                bd6778556c0f9878ebe6e8324916d78280f23f7e3921b29b42bba6ca2d780399
                ca4ed3cb2d036c9bed80b235809198422135e2d842c8f53a4dd59fe0bed889d4
                7840164024b1f668cc566978d431eb2a07a20ed06e575551e1b030db1350e94c
                929a028a5dc25340e3434f2250e3f49de171bb850875d280050e495544ba71b7
                1ea36c2937ad6593e2b5bca28bc38e59cea91f26cd1ca8aa4bd9fbc1c605ae46
                ae3f559b3a6ebf89ff569ff365c3cba4b4b91f665ffda397188fe23ea456c802
                c47a8062844d404fab41a0fa83fd0dd66e4db51115f026197f4c89a1bf28246b
                a9966ca2973b0f3afa43154896a56bfe2153dfaaa3ccd2ab011b7f91470cbdc0
                4af7cfe1703de7040f4d7777b068769d4035377cc7664f406b5d69356aa33045
                c4334a1e2ce602ea2b1ec666352d14b5996dad451a4cb886c66143dc25f8f1bc
                f0ed253febc9733432eada35a6afc982749fa0ec680a881db06171ea37fa8338
                1ec90a6afa2f269d9da07c8f302161e26c9a4c21c2560ced811bdf6be402d36a
                e2f11f884351241e779a22f8b69a8e3eeaa676e7150143a66b3a92d4dace9f4f
                9b61e3f7e0aa7656c818ecfb53303457d51e74e7ec89cf038c9a73f3834383e8
                22d2f50c3a7775aa0e63b127a214db7490e488f7ee91782a90de32f4ab22601a
                f7b190fcc6a292e42e2f8b69caace994b127e9f91532b6d8c3b7ce08f991d269
                220bceeed7d4e6151523e63e41bcd27154fd3a7f7370c04b1258715413ec5f17
                f51baa99e8e5cd59ac7af17daecd0e8926002403ab87a422e422a6fb1186b5bb
                7db25faffedad247fd741b2461aa3b9612342142af10decefe00c00b37a667ad
                7665fbc4085b5312bda690166245a93b (AES256-CTR encrypted block) (bytes)

Note	The decrypted 4.0.1.0 should match the plaintext key’s structure for 4.0.1.0 through 4.0.1.10. The padding length WILL change, however, between the two unless using a cipher with an 8-byte block size.

When 4.0.1.0 is decrypted, it yields:

Decrypted 4.0.1.0

4.0.1.0 0d98bd61 (228113761)
4.0.1.1 0d98bd61 (228113761)
4.0.1.2 00000007 (7)
    4.0.1.2.0 7373682d727361 ("ssh-rsa")
4.0.1.3 00000201 (513)
    4.0.1.3.0 00b7cec04601ce2a12f0c924cb9a30eb990066812cb14369193f30b2b9fdd4af
              cb300c918f2a77d64410f3617ae7c8ca318c257d3c4df4e2c4108bbbe93a8689
              4ba14b3575f2f72150bc381dcbfb742c7a196866fd3184ace96761adda0fc299
              2f6c866d7569919fc22d9c4bf0de405a8c76d519aa2a5329dc6825777229a5d0
              b753a7825a89b95275f9c025e215343c6c88cd6690a221f8ae9ef675ee464dc7
              d118da410507ea5d6b6489dd60afd8a6646492db3e279f1a78240db8abbda6c5
              0714c9636650a72081e7fa5d472c1428b07eae5d15b64ea1e2a7508512fe9ab6
              55f86a313486d3cca1dd8e90acc5c9fba4d6e767507fbab9f3a7f68c748142af
              2a3701d31a8a9b7511958aa77187ba702ed934d385afcee42380e95e0e7e9bc0
              f4d23367fc770374167b7f0926fb6fdb6d05aad1cfd191824845b014e18153bf
              0d1d3c3b1fadbb25a3f1d151f9b684633d8c1690fcd8cad05aac2aeb23dbf19a
              37e480a008910319c116d47bd924b39942543b88a0f6127952b2d8e1290f3029
              f542aebe9c0c8e36cf3296865cd6643c8924d566ebf4971809399a1ac096fe1e
              dc3b5f871bf5ef0b4d44e0ea27620d205142e0bfcf677b4db025532121a3f074
              5aa4d0586331733257855a5cecbe3ac4403d04ff0cc0c58b7c04904b402125c2
              bc2a63a20ebb309cc6f3e65db301a058b8dace07e71b38f3f3595433f69b198f
              07 (bytes)
4.0.1.4 00000003 (3)
    4.0.1.4.0 010001 (65537)
4.0.1.5 00000200 (512)
    4.0.1.5.0 499f2c705e04bfe17a4476d27e5e1ddfd8c335f63ac22f748754f02183440f6d
              a93f3f86429261663e0bddfda69d4c2f705d0bbe7dd31a8941bf5672e29844a1
              e0670970c6f2a98b76f85b26fafedb59c49786b8df7eaeeb86171fd579fe8df0
              eadd2536a4244a0332d5a9ad3eb8340c930464153e82b4ffad4f647a7ba808e3
              854450f806b60e0b670fc99cb6b58786497d4c199e7750ee5089934eef25f465
              12394955c487e10744ebdb9a00951c8095b024d4ce75f1da3146b5b3447169f5
              9e23d40685438bc7bcad1173927a389a0903ba111a46809d123b3432197cca8f
              c0c27816fbf215c2b7c584b94f37c9ed8a8e815942effdcf54757268afe58fd7
              00cdcf6a98a20950617b0624aa835d95e27d7afcdee70c397ca1b6aa04735e6d
              5c5e01bfff2174cf562d36842624490e12ca8142595d52567494f38b2124012c
              acacb2564e21c845eb94f5d6ebf6f39066e1fa04b318174e6f9994823ba4d9ef
              2c28b37cb3ea05fa3cad7200898394276835523e4e416054f23db0eb732211d3
              a11ea551390ae8d58d69e14664e0e20f2bf0ccd24d260b832a94144f5801ea7c
              dbb2436f21ba2dbaecbcd573f24c5e0d43fd26b4ae6764e138ddaf4775ac0163
              e45727c10027f716cbe3cc70fff73441bb2538e5426a1a5638b448a7bde96804
              1ec2184ef67b0da60070297cd73deeefebd1951611c7a776c956e18e5f163a21 (bytes)
4.0.1.6 00000100 (256)
    4.0.1.6.0 0ae2e1cf2455a0d82272e6a42bbba83eb765496e5a33e13b8c94756d8c32f7d7
              505fd997bdd5ec08c59bf8d1d659d1df02bec669ebb5aaaf5db1ec70ce2f2a6b
              3a17b7b1fce3adc6203c2905cd652d7622065dd011ae33894467c6dca3643952
              b0caedff9bc78ac40408074027566ee4c4751ad3ff452a2781af8b5c2c9bf09b
              34ee5e6201330b4bc381af766798667c5b9ad0733c19f4ef475fd264655e0305
              53f2f2f8de59c2aee74b9dd6720e3108143dfedd41cf4bc11de2b9a9f40faec7
              2a52312abee4c6155acfee9384a16348c715346ebe693895fe6d2348d4dedb0a
              137c487185ff949c209115b9c8a106329991f049e8430c7ba60dd5408d72ac98 (bytes)
4.0.1.7 00000101 (257)
    4.0.1.7.0 00e50b65ba6ae4cb29ae66129c3e41ffeba36cd6ecbaa7045ff90cea71d09bc0
              56b0b9134dc5754c49da1fe8ab169cd149eedaeccf4913d915f4f241c5fd86c7
              7511e0c261c344600a84cce78e8cf493e492844cb82c42ab6d1246a53e5cf50a
              d4759c2a5c09d53b1c5c3b449328eea01434d6e537b3a513928dfaddf0a72728
              23899b8d795220cb3344ab8d0e846e1e40ffdfb5c719262c2b527a890a51faab
              cf10904699135f7b997487f4b48d4490ad80fc25b346fa0bb587f09295bf0f71
              ac10a8086867d4bad00a0c27a6456f08e0c2bf8caed8768f0366a2440428180a
              292617af61feabab9a7075b8bc21209a5439bbfe3613917071fee74a8d5d80fe
              99 (bytes)
4.0.1.8 00000101 (257)
    4.0.1.8.0 00cd7077659fad983104bcc7dc526242b9ea52cea40e923df771ac2a28e377f2
              b9231a58c2448c6b8d17fe83571ef6bdbbc11f3d4ab4254ea859684b8772911f
              9c6f355479053e3e3d3a6ecce13a016908298ca3f8b628d2111749a3627628eb
              05844f546795a5067d39b1d304e19cc6fc1be00a6164ea33e4abbc87f5683227
              1d825c868c5ccda3775b037711e99436f96c53f3780b985084e1d84a458c687a
              b0938a09bf6f9b3ffec41ed02fd5b27572c7d180039e405a559b62fc08f804b1
              9f043dba4c6f7565b1c72759f4b932d4f93d4f41da91b1b146f29854a1008341
              e4760bdd4987097ec4a6551ab96e099a04a38d6a893b533db185abb55736419e
              9f (bytes)
4.0.1.9 00000018 (24)
    4.0.1.9.0 54686973206973206120636f6d6d656e7420737472696e67 ("This is a comment string")
4.0.1.10 010203 ([1 2 3], 3 bytes)

See the plaintext structure for details.

18 KiB Raw Permalink Blame History Unescape Escape

v1 (Encrypted)

Structure

Example

18 KiB

Raw Permalink Blame History