[ale] Documentation of SSH exchange (including math)

[Alex Carver]

On 9/6/2012 08:14, Derek Atkins wrote:
> Hi,
>
> Alex Carver <agcarver+ale at acarver.net> writes:
>
>> Trusting the certificates or host keys on the two ends isn't a problem
>> in this case.  In my implementation design, the two sets of host keys
>> and user keys are installed on both ends of the link via an OOB
>> connection (using a desktop machine to do the heavy lifting for key
>> generation).  So both ends are trusted in this case.
>>
>> I'll investigate SSL/cert and see how that goes through.  In any case
>> whatever I use has to fit on a small microcontroller.
>
> Does it have to be free?
> The company I work for sells an embedded SSL toolkit just for this purpose.

Yes, it does have to be free.  This is just a personal project so I'm 
going to roll my own code.

I've downloaded the OpenSSH code so I'll just have to sit down with that 
and figure out the flow.