StreamSec Tools 4.x includes a clean-room implementation of the SSH-2 protocol for Embarcadero Delphi ^TM, usable as both an SSH client and an SSH server. It shares the same cryptographic core as the rest of the library, so no OpenSSL and no external SSH binary is required on any target platform.

KEY EXCHANGE

• curve25519-sha256 (and curve25519-sha256@libssh.org)
• ecdh-sha2-nistp256 / nistp384 / nistp521
• diffie-hellman-group14/16/18 and group-exchange (SHA-256)
• Post-quantum hybrid key exchange using ML-KEM (FIPS-203)

HOST KEYS AND AUTHENTICATION

• Host keys: ssh-ed25519, ecdsa-sha2-nistp256/384/521 and rsa-sha2-256/512
• Public-key client authentication (Ed25519, ECDSA, RSA)
• Password authentication with PBKDF2-based verifiers on the server

CIPHERS AND INTEGRITY

• AEAD: aes128-gcm / aes256-gcm and chacha20-poly1305@openssh.com
• aes128-ctr / aes192-ctr / aes256-ctr
• hmac-sha2-256 / hmac-sha2-512, with Encrypt-then-MAC

FEATURES

• SSH client and server components
• Local and remote TCP/IP port forwarding (tunnels)
• A subsystem framework, used among other things for SFTP and the StreamSec Network Interface Framework
• Interoperability tested against OpenSSH and PuTTY

See also SFTP and TLS, or return to the StreamSec Tools 4.x overview.