Comments on: OpenSSH 5.1 and ASCII Art Fingerprints

By: rbu

rbu — Thu, 28 Aug 2008 18:36:13 +0000

ircd, one of the requirements of the paper the algorithm is based on was that it is unfeasible to produce two similar images. According to the authors the algorithm will fulfill that. However, obviously the fuzzy attacks are possible on the eye, and that widens the target space for brute force attacks.

By: ircd

ircd — Thu, 28 Aug 2008 17:23:05 +0000

Nice, but how easy is it to produce two similar looking (at a glance) images from wildly varying keys, either deliberately or through randomness?

By: anon

anon — Fri, 25 Jul 2008 18:26:55 +0000

does it work against “fuzzy fingerprints” (http://freeworld.thc.org/papers/ffp.html ), I mean, do the “images” look different ?

By: Sebastian

Sebastian — Wed, 23 Jul 2008 17:19:12 +0000

Cool feature, good post

By: oh

oh — Wed, 23 Jul 2008 13:53:37 +0000

when u have more than 2-3 servers you wont remember the graphic anyway then its just wasting your screen space

tho the idea is fun and stuff =)

By: rbu

rbu — Wed, 23 Jul 2008 11:53:07 +0000

Lars, there is no ebuild for it yet, but as I know our base-system team, you will not have to wait for long.

By: zym

zym — Wed, 23 Jul 2008 10:42:44 +0000

sounds very useful if there is just a couple of servers, it may be very noisy if you have thousands of servers. I’d like to try it.

By: Lars Strojny

Lars Strojny — Wed, 23 Jul 2008 09:04:01 +0000

Do you have an ebuild for it?