Recognize LANcom LCOS software and ssh-ed448 key type - Githubissues

arthepsy / ssh-audit

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

MIT License

2.96k stars 269 forks source link

Recognize LANcom LCOS software and ssh-ed448 key type #51

Closed dlenskiSB closed 3 months ago

dlenskiSB commented 3 months ago

This extends ac64f87 ("Extract software (Dropbear, OpenSSH, HP iLO, Cisco) and OS (NetBSD, FreeBSD) from banner.")

LANcom router devices appear to be primarily used in Germany (see [1] for examples on the public Internet), and they appear to support the 'ssh-ed448' key type which is documented in [2], but which has never been supported by any as-yet-released version of OpenSSH.

[1] https://www.shodan.io/search?query=ssh+%22ed448%22 [2] https://datatracker.ietf.org/doc/html/rfc8709#name-public-key-format

dlenskiSB commented 3 months ago

@jtesta might be interested in this; I see that ed448 was added to his fork back in https://github.com/jtesta/ssh-audit/commit/4cae6aff431c7d82f46af0e2ecc51355f4acca33