Russh

Low-level Tokio SSH2 client and server implementation.

Examples: simple client, interactive PTY client, server, SFTP client, SFTP server.

This is a fork of Thrussh by Pierre-Étienne Meunier.

✨ = added in Russh

• More panic safety ✨
• async_trait support ✨
• direct-tcpip (local port forwarding)
• forward-tcpip (remote port forwarding) ✨
• direct-streamlocal (local UNIX socket forwarding, client only) ✨
• forward-streamlocal (remote UNIX socket forwarding) ✨
• Ciphers:
  • chacha20-poly1305@openssh.com
  • aes256-gcm@openssh.com ✨
  • aes256-ctr ✨
  • aes192-ctr ✨
  • aes128-ctr ✨
  • aes256-cbc ✨
  • aes192-cbc ✨
  • aes128-cbc ✨
  • 3des-cbc ✨
• Key exchanges:
  • curve25519-sha256@libssh.org
  • diffie-hellman-group1-sha1 ✨
  • diffie-hellman-group14-sha1 ✨
  • diffie-hellman-group14-sha256 ✨
  • diffie-hellman-group16-sha512 ✨
  • ecdh-sha2-nistp256 ✨
  • ecdh-sha2-nistp384 ✨
  • ecdh-sha2-nistp521 ✨
• MACs:
  • hmac-sha1 ✨
  • hmac-sha2-256 ✨
  • hmac-sha2-512 ✨
  • hmac-sha1-etm@openssh.com ✨
  • hmac-sha2-256-etm@openssh.com ✨
  • hmac-sha2-512-etm@openssh.com ✨
• Host keys and public key auth:
  • ssh-ed25519
  • rsa-sha2-256
  • rsa-sha2-512
  • ssh-rsa ✨
  • ecdsa-sha2-nistp256 ✨
  • ecdsa-sha2-nistp384 ✨
  • ecdsa-sha2-nistp521 ✨
• Authentication methods:
  • password
  • publickey
  • keyboard-interactive
  • none
  • OpenSSH certificates (client only ✨)
• Dependency updates
• OpenSSH keepalive request handling ✨
• OpenSSH agent forwarding channels ✨
• OpenSSH server-sig-algs extension ✨
• openssl dependency is optional ✨

Safety

• deny(clippy::unwrap_used)
• deny(clippy::expect_used)
• deny(clippy::indexing_slicing)
• deny(clippy::panic)
• Exceptions are checked manually

Panics

• When the Rust allocator fails to allocate memory during a CryptoVec being resized.
• When mlock/munlock fails to protect sensitive data in memory.

Unsafe code

• cryptovec uses unsafe for faster copying, initialization and binding to native API.

Ecosystem

• russh-sftp - server-side and client-side SFTP subsystem support for russh - see russh/examples/sftp_server.rs or russh/examples/sftp_client.rs.
• async-ssh2-tokio - simple high-level API for running commands over SSH.

Contributors ✨

Thanks goes to these wonderful people (emoji key):

Mihir Samdarshi 📖	Connor Peet 💻	KVZN 💻	Adrian Müller (DTT) 💻	Simone Margaritelli 💻	Joe Grund 💻	AspectUnk 💻
Simão Mata 💻	Mariotaku 💻	yorkz1994 💻	Ciprian Dorin Craciun 💻	Eric Milliken 💻	Swelio 💻	Joshua Benz 💻
Jan Holthuis 🛡️	mateuszkj 💻	Saksham Mittal 💻	Lucas Kent 💻	Raphael Druon 💻	Maya the bee 💻	Milo Mirate 💻
George Hopkins 💻	Åke Amcoff 💻	Brendon Ho 💻	Samuel Ainsworth 💻	Sherlock Holo 💻	Alessandro Ricottone 💻	T0b1-iOS 💻
Shoaib Merchant 💻	Michael Gleason 💻	Ana Gelez 💻	Tom König 💻	Pierre Barre 💻	Jean-Baptiste Skutnik 💻	Adam Chappell 💻
Yaroslav Bolyukin 💻	Julian 💻	Thomas Rampelberg 💻	Kaleb Elwert 📖	Gary Guo 💻	irvingouj @ Devolutions 💻

This project follows the all-contributors specification. Contributions of any kind welcome!