dragonlinux / connectbot

Automatically exported from code.google.com/p/connectbot
Apache License 2.0
1 stars 0 forks source link

Menu text(s) for keyhandling are not correct #514

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
I downloaded current version from Market into my Del Streak. I imported my keys 
into ConnectBot and was successfully authenticated. Great app! Many thanks! 
But...

In the menu there is a text "Import private key", which is not correct. 
ConnectBot requires private key. The public key is always on the remote server. 
This text is confusing. Maybe ConnectBot is able to import a file with both 
keys, but importing public key into P-B is not correct text in any way.

Original issue reported on code.google.com by milan.ke...@gmail.com on 11 Oct 2011 at 8:00

GoogleCodeExporter commented 8 years ago
You say it says "Import private key" which you believe is incorrect.
Then you say that ConnectBot requires a private key...

Which is it?

Anyway, you can derive the public key from the private key.

Original comment by kenny@the-b.org on 12 Oct 2011 at 5:26

GoogleCodeExporter commented 8 years ago
Sorry. The text is "Manage Pubkeys". This should be "Manage private keys". The 
client needs private keys only. Public keys are worthless for client, they are 
usable for server only.

And no, the public key must not possible to derive or compute from private and 
vice versa. The asymmetric cryptography is based upon prediction, that this 
does not work (this is possible but in a long time-span, say 10k years, 10G 
years or more).

This is possible to put both keys in one file (as IIRC PuTTY does), but OpenSSH 
client does not (by default at least).

Original comment by milan.ke...@gmail.com on 12 Oct 2011 at 8:19

GoogleCodeExporter commented 8 years ago
"Pubkey" is just a term that SSH started using. I initially named it "key 
pairs," but it's not meant to be read as purely "public key." Key pair seems 
appropriate since ConnectBot does store both private and public parts of the 
key (even though, for instance, OpenSSH fixes the exponent at 0x10001).

Original comment by kenny@the-b.org on 12 Oct 2011 at 4:49