Methods and Systems of Information Protection, Information Security

ISSUES OF SSH CONNECTION PROTECTION BASED ON GOST ENCRYPTION IN ALT OS

Download PDF Article on eLIBRARY.RU

Abstract

The paper discusses the issues of improving the security of remote administration through the use of domestic cryptographic algorithms when establishing SSH connections in the ALT Linux operating system. The relevance of the study is due to the need to comply with the requirements of Russian regulators in the field of information protection and reduce dependence on foreign cryptographic solutions. The problem lies in assessing the stability of SSH connections when using GOST algorithms and analyzing the impact of the chosen cryptographic policy on the possibility of unauthorized access and connection performance. The process of establishing and functioning an SSH connection is chosen as the object of research, and the subject is the behavior of the server when the client and server cryptographic sets do not match. To solve this problem, an experimental setup of an SSH server and client in ALT Linux was performed using gostcrypto packages implementing the Grasshopper, Magma algorithms and Stribog-based integrity control functions. The research methodology included modeling legitimate and illegitimate connection attempts, analyzing network traffic using Wireshark, as well as measuring bandwidth and resource load. The experimental results showed that a server configured to use only GOST algorithms effectively blocks connections with incompatible cryptographic parameters. If the client is configured correctly, the connection is stable and complies with the specified security policy. Performance measurements have demonstrated that the use of GOST encryption provides throughput comparable to standard OpenSSH algorithms, with a similar load on computing resources. The conclusion is made about the practical applicability of GOST encryption in SSH connections for secure administration in domestic operating systems.

Online viewer

References

  1. Алицар А. Wireshark для всех. Лайфхаки на каждый день [Электронный ресурс] // Habr. 2021. 14 июня. URL: https://habr.com/ru/companies/vdsina/articles/562110/ (дата обращения: 01.12.2025).
  2. ГОСТ Р 34.10–2012. Информационная технология. Криптографическая защита информации. Процессы формирования и проверки электронной цифровой подписи.
  3. ГОСТ Р 34.12–2015. Информационная технология. Криптографическая защита информации. Блочные шифры.
  4. Официальный репозиторий пакетов ALT Linux [Электронный ресурс]. URL: https://packages.altlinux.org/ (дата обращения: 10.11.2025).
  5. Openssh-gostcrypto [Электронный ресурс] // ALT Linux Packages. URL: https://packages.altlinux.org/ru/p10/srpms/openssh-gostcrypto/ (дата обращения: 11.12.2025).
  6. Openssl-gost-engine [Электронный ресурс] // ALT Linux Packages. URL: https://packages.altlinux.org/ru/p10/srpms/openssl-gost-engine/ (дата обращения: 11.12.2025).
  7. Создание SSH-туннелей, использующих контроль целостности заголовков IP-пакетов в соответствии с ГОСТ Р 34.12-2015 [Электронный ресурс] // Документация ALT Linux. ALT Workstation 10.2. URL: https://docs.altlinux.org/ru-RU/alt-workstation/10.2/html/alt-workstation/ssh_t.html (дата обращения: 11.12.2025).
  8. Уймин А. Г. Определение отечественной технологической платформы в рамках создания киберполигона: «Сетевое и системное администрирование» // Текущие вызовы в подготовке кадров. Обучение специалистов по современным направлениям информационных технологий, кибербезопасности и ИКТ-электроники, актуальным для экономики данных: сборник научных трудов. Тверь, 2024. С. 122–123.

License

Copyright (c) 2026 D. V. Demidova, E. D. Komnatskaya (Author)

Keywords