Robie Basak

101 reputation

	101 reputation	bio	website		visits	member for	2 years, 4 months
1 badges		location			seen	Mar 26 at 15:01

4 Comments

Jan 18	comment	SSH: Two Factor Authentication And here's an upstream openssh bug. It looks like similiar functionality will be upstream in openssh soon.
Jan 18	comment	Can sshd authenticate each incoming connection with both a key AND a password? Also see this answer over at serverfault.com. It looks like RHEL have patched openssh with similar functionality.
Jan 18	comment	SSH: Two Factor Authentication I've found the corresponding bug and some further notes. The bug includes the patch as an attachment.
Jan 18	comment	SSH: Two Factor Authentication If you have a passphrase-encrypted private key, you only prove one thing to the server: that your client knows the private key. It doesn't prove to the server that you know your passphrase; the server doesn't even know about the existence of your passphrase. Therefore it is only "something you know" (since your client knows it) and only one factor. If an attacker gets hold of just one thing (your private key) then you are compromised. That's one factor. Arguing that your passphrase and private key count as two factors is just an exercise in sophistry. What counts is what happens on the wire.