Статьи

ISSUES OF SSH CONNECTION PROTECTION BASED ON GOST ENCRYPTION IN ALT OS

Download PDF

Abstract

The paper examines ways to improve the security of remote administration by using Russian cryptographic algorithms when establishing SSH connections in the ALT Linux operating system. The relevance of the study is determined by the need to comply with national information security requirements and to reduce dependence on foreign cryptographic solutions. The research problem consists in assessing the stability of SSH connections based on GOST algorithms and in analyzing how the selected cryptographic policy affects unauthorized access attempts and connection performance. The object of the study is the process of establishing and maintaining an SSH connection, while the subject is the server behavior when the cryptographic algorithm sets of the client and the server do not match. To solve the problem, an experimental SSH server and client configuration was performed in ALT Linux using gostcrypto packages that implement the Grasshopper and Magma algorithms and Stribog-based integrity control functions. The methodology included modeling legitimate and illegitimate connection attempts, analyzing network traffic with Wireshark, and measuring bandwidth and resource load. The experiments showed that a server configured to use only GOST algorithms effectively blocks connections with incompatible cryptographic parameters. When the client is configured correctly, the session is established stably and follows the specified security policy. The performance measurements demonstrate that GOST encryption provides throughput comparable to standard OpenSSH algorithms with a similar computational load. The results confirm the practical applicability of GOST-based SSH encryption for secure administration in domestic operating systems.

Online viewer

References

  1. Alitsar, A. (2021, June 14). Wireshark for everyone: Life hacks for every day. Habr. https://habr.com/ru/companies/vdsina/articles/562110/
  2. GOST R 34.10–2012. (2012). Information technology. Cryptographic protection of information. Processes of digital signature generation and verification. Standartinform.
  3. GOST R 34.12–2015. (2015). Information technology. Cryptographic protection of information. Block ciphers. Standartinform.
  4. ALT Linux Packages. (n.d.). Official repository of ALT Linux packages. https://packages.alt-linux.org/
  5. ALT Linux Packages. (n.d.). OpenSSH GOSTCrypto. https://packages.alt-linux.org/ru/p10/srpms/openssh-gostcrypto/
  6. ALT Linux Packages. (n.d.). OpenSSL GOST Engine. https://packages.alt-linux.org/ru/p10/srpms/openssl-gost-engine/
  7. ALT Linux Documentation. (n.d.). Creating SSH tunnels using IP packet header integrity control in accordance with GOST R 34.12-2015. https://docs.altlinux.org/ru-RU/alt-work-station/10.2/html/alt-workstation/ssh_t.html
  8. Uimin, A. G. (2024). Definition of a domestic technological platform within the framework of creating a cyber polygon: Network and system administration. In Current challenges in personnel training: Training of specialists in modern areas of information technology, cybersecurity, and ICT electronics relevant to the data economy (pp. 122–123).

License

Copyright (c) 2025 D. V. Demidova, E. D. Komnatskaya (Author)

Keywords