secsh(5) [debian man page]

SECSH(5)							    Lsh Manuals 							  SECSH(5)

NAME

       secsh - the Secure Shell protocol

DESCRIPTION

       secsh  is  a  protocol suite for secure remote login and other secure network services over an insecure network. It is outlined in [SECSH].
       It has three major components:

       The Transport layer protocol
	      This protocol, specified in [SECSH-TLP], provides  server  authentication,  confidentiality,  and  integrity  with  perfect  forward
	      secrecy.

       The User authentication protocol
	      This protocol, specified in [SECSH-AUTH], is used to authenticate a client to a server.

       The Connection protocol
	      This protocol, specified in [SECSH-CONN], multiplexes an encrypted tunnel into several logical channels.

IMPLEMENTATIONS

       Several implementations of the secsh protocol suite exist.

       The SSH2 product of SSH Communications Security Ltd., Finland <URL:http://www.ssh.fi> was the first. The secsh protocol suite has benefited
       a lot from their experience with their older SSH1 product, which is still in widespread use; it implements an older protocol ([SSH1]).

       The lsh suite of programs is a free implementation of the secsh protocol suite; it is distributed under the GNU General Public License.

REFERENCES

       [SECSH-ARCH] T. Ylonen, T. Kivinen, M. Saarinen, T. Rinne and S. Lehtinen, SSH Protocol Architecture, Internet draft, 6 August 1998

       [SECSH-TRANS] T. Ylonen, T. Kivinen, M. Saarinen, T. Rinne and S. Lehtinen, SSH Transport Layer Protocol, Internet draft, 6 August 1998

       [SECSH-AUTH] T. Ylonen, T. Kivinen, M. Saarinen, T. Rinne and S. Lehtinen, SSH Authentication Protocol, Internet draft, 6 August 1998

       [SECSH-CONN] T. Ylonen, T. Kivinen, M. Saarinen, T. Rinne and S. Lehtinen SSH Connection Protocol, Internet draft, 6 August 1998

       [SSH1] T. Ylonen, The SSH (Secure Shell) Remote Login Protocol, Internet draft (expired), 15 November 1995

TRADEMARKS

       SSH and Secure Shell are trademarks or registered trademarks of SSH Communications Security Ltd.

AUTHOR

       This man-page was written by J.H.M. Dassen (Ray) <jdassen@wi.LeidenUniv.nl>.

SEE ALSO

       lsh(1), lshd(8), ssh2(1), sshd2(8), ssh1(1), sshd1(8)

LSH
								   JANUARY 1999 							  SECSH(5)

SPKI(5) 							    Lsh Manuals 							   SPKI(5)

NAME

       SPKI - Simple Public Key Infrastructure formats

DESCRIPTION

       The  IETF  Simple  Public  Key Infrastructure Working Group has defined a format for storing, transmitting and manipulating certificates to
       support security in a wide range of Internet applications which will require the use of public key certificates.

       For the definition of the SPKI format, please refer to [SPKI].

       The format of SPKI objects is a simplified form of S-expression. An S-expression is a list enclosed in matching "(" and ")", similar to the
       recursive list data structure in of the LISP and Scheme programming languages.

Canonical S-expression
       A  canonical S-expression is a unique representation of an S-expression which may contain arbitrary binary byte strings. For transport over
       a 7-bit channel, it may be base64 (see [RFC2045]) encoded.

Advanced S-expression
       The advanced S-expression format is a complexer form of an S-expression which is not necessarily unique. It is more suited for human  read-
       ing than the canonical S-expression format.

EXAMPLE

       Examples SPKI certificates can be found in [SPKI].

REFERENCES

       <URL:http://www.clark.net/pub/cme/html/spki.html>
	      Home-page of the IETF SPKI working group.

       <URL:http://theory.lcs.mit.edu/~rivest/sexp.html>
	      Home-page of the S-expression technology.

       Carl M. Ellison, SPKI Requirements, Internet draft,
       <URL:http://www.ietf.org/internet-drafts/internet-drafts/draft-ietf-spki-cert-req-02.txt>,
       24 October 1998.

       [SPKI]  Carl  M. Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian M. Thomas and Tatu Ylonen, Simple Public Key Certificate, Internet
       draft (expired),
       <URL:http://www.ietf.org/internet-drafts/internet-drafts/draft-ietf-spki-cert-structure-05.txt>,
       13 March 1998.

       Carl M. Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian M. Thomas and Tatu Ylonen, SPKI Certificate Theory, Internet draft,
       <URL:http://www.ietf.org/internet-drafts/internet-drafts/draft-ietf-spki-cert-theory-04.txt>,
       17 November 1998.

       Carl M. Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian M. Thomas and Tatu Ylonen, SPKI Examples, Internet draft (expired),
       <URL:http://www.ietf.org/internet-drafts/draft-ietf-spki-cert-examples-01.txt>,
       10 March 1998.

       [RFC2045] N. Freed and N. Borenstein, Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies, 2  December
       1996.

AUTHOR

       This man-page was written by J.H.M. Dassen (Ray) <jdassen@wi.LeidenUniv.nl>.

SEE ALSO

       lsh_keygen(1)

LSH
								   JANUARY 1999 							   SPKI(5)