blog




  • Essay / Differences between SSH and SSL - 741

    SSH vs SSL – Which is better?SSH – Secure ShellOverview of SSHSSH is a UNIX-based command interface and protocol used to secure data during transmission between different devices. SSH is commonly used to manage servers or any network devices remotely. SSH includes a suite of three utilities, namely slogin, ssh and scp, based on previous versions of the UNIX utilities rlogin, rsh and rcp. Use of SSH utilities on both ends of the connection is authenticated using a digital certificate. Passwords are encrypted unlike utilities like Telnet. SSH has a built-in username/password authentication system to establish a connection. SSH uses RSA public key cryptography for authentication and connection establishment. Most often, SSH uses SSL under the hood, so they are both equally secure. One of the advantages of SSH is that using key pair authentication is simple and built into the protocol. How SSH Works The SSH secure shell is a protocol composed of three mechanisms: the transport layer, user authentication, and the connection protocol. The transport layer runs over TCP/IP of the OSI model. This layer provides server authentication for the connection. This layer also manages the confidentiality and integrity of the connection between the two ends. Another mechanism is the user authentication element. This authenticates the client-side user to the server. User authentication will run on the transport layer. The last mechanism is the connection protocol, which multiplexes the encrypted tunnel. The transmission of the connection protocol takes place via the user authentication layer. Once the transport layer establishes the connection, SSH works. Another service request will be sent when the middle of the paper is inserted. • SSH is used to manage secure servers remotely, while SSL is used to transfer highly confidential data such as credit card details etc. .• SSH uses a username/password authentication system to establish a secure connection, while SSL uses encrypted certificates.• SSH is more about network tunneling and SSL is more about certificates.• Both are normally used for different purposes. SSH is used to create a secure connection over a network and SSL is used to transfer data securely through encryption techniques and the use of certificates. So it is the goal that decides which one is better.Reference: 1. http://www.hit.bme.hu/~buttyan/courses/BMEVIHI4372/ssh.pdf2. http://www.differencebetween.net/technology/difference-between-ssh-and-ssl/3. https://www.symantec.com/content/en/us/enterprise/white_papers/b-beginners-guide-to-ssl-certificates_WP.pdf