ICS35.030

CCSL80

中華人民共和國密碼行業(yè)標準

GM/T0129—2023

SSH密碼協(xié)議規(guī)范

Secureshellcryptographyprotocolspecification

2023?12?04發(fā)布2024?06?01實施

國家密碼管理局發(fā)布

GM/T0129—2023

目次

前言··························································································································Ⅲ

引言··························································································································Ⅳ

1范圍·······················································································································1

2規(guī)范性引用文件········································································································1

3術語和定義··············································································································1

4縮略語····················································································································1

5協(xié)議框架·················································································································1

5.1協(xié)議概述···········································································································1

5.2傳輸層協(xié)議········································································································2

5.3鑒別協(xié)議···········································································································2

5.4連接協(xié)議···········································································································2

6密碼算法和密鑰種類··································································································2

6.1密碼算法···········································································································2

6.2密鑰種類···········································································································2

7數據類型定義···········································································································3

7.1算法標識···········································································································3

7.2基本數據類型·····································································································3

8傳輸層協(xié)議··············································································································3

8.1協(xié)議概述···········································································································3

8.2協(xié)議流程···········································································································4

8.3協(xié)議版本···········································································································4

8.4數據包··············································································································4

8.5密鑰協(xié)商···········································································································7

8.6服務請求···········································································································9

8.7斷開連接···········································································································9

9鑒別協(xié)議···············································································································10

9.1協(xié)議概述··········································································································10

9.2協(xié)議流程··········································································································11

9.3數據包·············································································································11

9.4基于口令的鑒別方法···························································································13

9.5基于非對稱密鑰的鑒別方法··················································································13

9.6基于數字證書的鑒別方法·····················································································14

Ⅰ

GM/T0129—2023

10連接協(xié)議··············································································································15

10.1協(xié)議概述········································································································15

10.2連接信道········································································································15

10.3數據包···········································································································16

參考文獻····················································································································18

Ⅱ

GM/T0129—2023

前言

本文件按照GB/T1.1—2020《標準化工作導則第1部分：標準化文件的結構和起草規(guī)則》的規(guī)

定起草。

請注意本文件的某些內容可能涉及專利。本文件的發(fā)布機構不承擔識別專利的責任。

本文件由密碼行業(yè)標準化技術委員會提出并歸口。

本文件起草單位：北京小雷科技有限公司、北京海泰方圓科技股份有限公司、北京數字認證股份有

限公司、格爾軟件股份有限公司、中電科網絡安全科技股份有限公司、興唐通信科技有限公司、北京信

安世紀科技股份有限公司、長春吉大正元信息技術股份有限公司、北京數盾信息科技有限公司。

本文件主要起草人：曾宇波、柳增壽、蔣紅宇、傅大鵬、鄭強、羅俊、王妮娜、汪宗斌、趙麗麗、張國慶。

Ⅲ

GM/T0129—2023

引言

本文件的協(xié)議內容參考TheSecureShell安全協(xié)議（RFC4251，RFC4252，RFC4253，RFC4254），

按照我國相關密碼政策和法規(guī)，基于我國密碼技術體系，使用SM2、SM3、SM4密碼算法和數字證書機

制形成SSH傳輸層協(xié)議、鑒別協(xié)議和連接協(xié)議。

Ⅳ

GM/T0129—2023

SSH密碼協(xié)議規(guī)范

1范圍

本文件規(guī)定了SSH的安全交互密碼協(xié)議，規(guī)定了交互通道的加密傳輸協(xié)議、鑒別協(xié)議與連接協(xié)

議，規(guī)定了密碼算法在協(xié)議中的使用方法。

本文件適用于SSH服務端和SSH客戶端產品的研發(fā)和檢測。

2規(guī)范性引用文件

下列文件中的內容通過文中的規(guī)范性引用而構成本文件必不可少的條款。其中，注日期的引用文

件，僅該日期對應的版本適用于本文件；不注日期的引用文件，其最新版本（包括所有的修改單）適用于

本文件。

GB/T15852.1信息技術安全技術消息鑒別碼第1部分：采用分組密碼的機制

GB/T15852.2信息技術安全技術消息鑒別碼第