MRmrbluecoat·Aug 11, 2024
> Tons of issues in the periphery
I wonder how TinySSH[1] compares
[1] https://github.com/janmojzis/tinyssh
In Black Hat 2024: Secure Shells in Shambles [pdf]janmojzis
tinyssh
C2019–2024
janmojzis / tinyssh
tinyssh
TinySSH is small server (less than 100000 words of code)
7Distinct people
8Mentions
0Explicit recommenders
1.5KGitHub stars
What to know before exploring
What it is
TinySSH is small server (less than 100000 words of code)
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 12:54:37 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year8 dated mentions
Observed mentions: 2019-10-25 15:47:49 UTC to 2024-08-11 15:32:39 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 5 | 1 | 4 |
What Hacker News says
8 sourcesI copied your comment to https://github.com/janmojzis/tinyssh/issues/85
If author/maintainer doesn't frequent HN, perhaps discussion there might get some action.
In TinySSH is a small SSH server using NaCl, TweetNaClThe license is "CC0 1.0 Universal"
In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-...
Discussed here: https://news.ycombinator.com/item?id=39610509
Does this need updating?
EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
In TinySSH is a small SSH server using NaCl, TweetNaClTinySSH is a small SSH server using NaCl, TweetNaCl
322 points · Open discussiondjb suggested that for openssh instead of the tinydns kex, so tinydns switched also:
https://github.com/janmojzis/tinyssh/issues/50
In OpenSSH 8.9I prefer tinyssh to dropbear and even to openssh. https://github.com/janmojzis/tinyssh
Its not for the tinfoil, the reason is the size. OpenSSH is too large for some small systems. In June, dropbear finally got support for chacha20-poly1305 and ed25519 keys, but it only offers the TweetNaCl version. tinyssh has had this since 2014 and can use the original NaCl library, not just the Twitter version.
tinyssh does what the top comment comment in this thread suggests, and in fact goes further. It does not include bad algorithms. This is arguably better than only "deprecating" them.
In FreeBSD SSH HardeningTinySSH has introduced a combination of NTRU with 25519.
https://tinyssh.org/
"Postquantum crypto: sntrup4591761x25519-sha512@tinyssh.org"
OpenSSH included this as an experimental feature in v8:
https://www.openssh.com/releasenotes.html
" * ssh(1), sshd(8): Add experimental quantum-computing resistant key exchange method, based on a combination of Streamlined NTRU Prime 4591^761 and X25519."
The TinySSH implementation is on github:
https://github.com/janmojzis/tinyssh/blob/master/PROTOCOL.sn...
In Why EdDSA held up better than ECDSA against Minerva