SSH.NET

SSH.NET is a Secure Shell (SSH-2) library for .NET, optimized for parallelism.

Introduction

This project was inspired by Sharp.SSH library which was ported from java and it seems like was not supported for quite some time. This library is a complete rewrite, without any third party dependencies, using parallelism to achieve the best performance possible.

Documentation

Documentation is hosted at https://sshnet.github.io/SSH.NET/. Currently (4/18/2020), the documentation is very sparse. Fortunately, there are a large number of tests that demonstrate usage with working code. If the test for the functionality you would like to see documented is not complete, then you are cordially invited to read the source, Luke, and highly encouraged to generate a pull request for the implementation of the missing test once you figure things out. 🤓

Features

• Execution of SSH command using both synchronous and asynchronous methods
• Return command execution exit status and other information
• Provide SFTP functionality for both synchronous and asynchronous operations
• Provides SCP functionality
• Provide status report for upload and download sftp operations to allow accurate progress bar implementation
• Remote, dynamic and local port forwarding
• Shell/Terminal implementation
• Specify key file pass phrase
• Use multiple key files to authenticate
• Supports publickey, password and keyboard-interactive authentication methods
• Supports two-factor or higher authentication
• Supports SOCKS4, SOCKS5 and HTTP Proxy

Encryption Method

SSH.NET supports the following encryption methods:

• aes128-ctr
• aes192-ctr
• aes256-ctr
• aes128-gcm@openssh.com (.NET 6 and higher)
• aes256-gcm@openssh.com (.NET 6 and higher)
• aes128-cbc
• aes192-cbc
• aes256-cbc
• 3des-cbc
• blowfish-cbc
• twofish-cbc
• twofish192-cbc
• twofish128-cbc
• twofish256-cbc
• arcfour
• arcfour128
• arcfour256
• cast128-cbc

Key Exchange Method

SSH.NET supports the following key exchange methods:

• curve25519-sha256
• curve25519-sha256@libssh.org
• ecdh-sha2-nistp256
• ecdh-sha2-nistp384
• ecdh-sha2-nistp521
• diffie-hellman-group-exchange-sha256
• diffie-hellman-group-exchange-sha1
• diffie-hellman-group16-sha512
• diffie-hellman-group14-sha256
• diffie-hellman-group14-sha1
• diffie-hellman-group1-sha1

Public Key Authentication

SSH.NET supports the following private key formats:

• RSA in OpenSSL PEM ("BEGIN RSA PRIVATE KEY") and ssh.com ("BEGIN SSH2 ENCRYPTED PRIVATE KEY") format
• DSA in OpenSSL PEM ("BEGIN DSA PRIVATE KEY") and ssh.com ("BEGIN SSH2 ENCRYPTED PRIVATE KEY") format
• ECDSA 256/384/521 in OpenSSL PEM format ("BEGIN EC PRIVATE KEY")
• ECDSA 256/384/521, ED25519 and RSA in OpenSSH key format ("BEGIN OPENSSH PRIVATE KEY")

Private keys can be encrypted using one of the following cipher methods:

• DES-EDE3-CBC
• DES-EDE3-CFB
• DES-CBC
• AES-128-CBC
• AES-192-CBC
• AES-256-CBC

Host Key Algorithms

SSH.NET supports the following host key algorithms:

• ssh-ed25519
• ecdsa-sha2-nistp256
• ecdsa-sha2-nistp384
• ecdsa-sha2-nistp521
• rsa-sha2-512
• rsa-sha2-256
• ssh-rsa
• ssh-dss

Message Authentication Code

SSH.NET supports the following MAC algorithms:

• hmac-sha2-256
• hmac-sha2-512
• hmac-sha2-512-96
• hmac-sha2-256-96
• hmac-sha1
• hmac-sha1-96
• hmac-md5
• hmac-md5-96
• hmac-sha2-256-etm@openssh.com
• hmac-sha2-512-etm@openssh.com
• hmac-sha1-etm@openssh.com
• hmac-sha1-96-etm@openssh.com
• hmac-md5-etm@openssh.com
• hmac-md5-96-etm@openssh.com

Compression

SSH.NET supports the following compression algorithms:

• none (default)
• zlib@openssh.com (.NET 6 and higher)

Framework Support

SSH.NET supports the following target frameworks:

• .NETFramework 4.6.2 (and higher)
• .NET Standard 2.0 and 2.1
• .NET 6 (and higher)

Usage

Multi-factor authentication

Establish a SFTP connection using both password and public-key authentication:

var connectionInfo = new ConnectionInfo("sftp.foo.com",
                                        "guest",
                                        new PasswordAuthenticationMethod("guest", "pwd"),
                                        new PrivateKeyAuthenticationMethod("rsa.key"));
using (var client = new SftpClient(connectionInfo))
{
    client.Connect();
}

Verify host identify

Establish a SSH connection using user name and password, and reject the connection if the fingerprint of the server does not match the expected fingerprint:

string expectedFingerPrint = "LKOy5LvmtEe17S4lyxVXqvs7uPMy+yF79MQpHeCs/Qo";

using (var client = new SshClient("sftp.foo.com", "guest", "pwd"))
{
    client.HostKeyReceived += (sender, e) =>
        {
            e.CanTrust = expectedFingerPrint.Equals(e.FingerPrintSHA256);
        };
    client.Connect();
}

Building the library

The library has no special requirements to build, other than an up-to-date .NET SDK. See also CONTRIBUTING.md.

Supporting SSH.NET

Do you or your company rely on SSH.NET in your projects? If you want to encourage us to keep on going and show us that you appreciate our work, please consider becoming a sponsor through GitHub Sponsors.