tinyssh
tinyssh copied to clipboard
janmojzis
TinySSH is small server (less than 100000 words of code)
Similar to [OpenSSH's new PerSourcePenalties](https://www.gamingdeputy.com/enhanced-security-feature-added-to-openssh-to-defend-against-password-guessing-attacks/), would be nice to have a native method for blocking brute force attempts rather than needing additional tooling like Fail2Ban. More info: https://i.blackhat.com/BH-US-24/Presentations/REVISED02-US24_Moore_Secure_Shells_in_Shambles_Wednesday.pdf
One of TinySSH's stated "features" is that it uses _"no older cryptographic primitives - rsa, dsa, classic diffie-hellman, hmac-md5, hmac-sha1, 3des, arcfour, …"_ While I would agree with almost all...
