the new episode , a compact SSH server and client distributed under the MIT license, primarily used on embedded systems such as wireless routers. Dropbear is distinguished by its low memory consumption (only 110kB when statically linked with uClibc), the ability to disable unnecessary functionality at the build stage, and support for building both client and server in a single executable file similar to busybox. Dropbear supports X11 forwarding, is compatible with OpenSSH key files (~/.ssh/authorized_keys), and can create multiplexed connections through a transit host.
In :
- Support for the Ed25519 digital signature algorithm has been added to hostkeys and authorized_keys.
- Support for an authentication protocol based on the ChaCha20 stream cipher and Poly1305 message authentication developed by Daniel Bernstein has been added.
- Support for the rsa-sha2 digital signature format has been added, which will soon become mandatory for OpenSSH due to the deprecation of sha-1 (existing RSA keys will work with the new format without changes to hostkeys/authorized_keys).
- The implementation of curve25519 has been replaced with a more compact version from the TweetNaCl project.
- Support for AES GCM has been added (disabled by default).
- CBC ciphers, 3DES, hmac-sha1-96, and X11 forwarding have been disabled by default.
- Issues with compatibility with the IRIX OS have been resolved.
- An API for specifying public keys directly instead of using authorized_keys has been added.
- A vulnerability in SCP has been eliminated , allowing the modification of access rights on the target directory when the server delivers a directory with empty name or a dot. When receiving the command 'D0777 0 \n' or 'D0777 0 .\n' from the server, the client applied the access rights change to the current directory.
Source: opennet.ru
