Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is OpenSSH using OpenSSL to encrypt traffic? Or something else?

share|improve this question
2  
This is not strictly a duplicate, however this earlier question is probably relevant to help explain the concepts. security.stackexchange.com/questions/1599/… –  user185 Apr 29 '11 at 23:01

2 Answers 2

up vote 13 down vote accepted

OpenSSH is a program depending on OpenSSL the library, specifically OpenSSH uses the libcrypto part of OpenSSL.

share|improve this answer
6  
It's worth mentioning that OpenSSH does not use the TLS protocol thats used for HTTPS etc. OpenSSH uses some of the OpenSSL cryptographic primatives. –  JasperWallace Apr 22 at 8:04

It appears that now OpenSSH can now be compiled without OpenSSL: http://it.slashdot.org/story/14/04/30/1822209/openssh-no-longer-has-to-depend-on-openssl http://marc.info/?l=openbsd-cvs&m=139879453001957&w=2

The author stated that this was in the making for a long time, but Heardbleed was likely the last straw.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.