Methods and Systems of Information Protection, Information Security

ISSUES OF SSH CONNECTION PROTECTION BASED ON GOST ENCRYPTION IN ALT OS

Download PDF Article on eLIBRARY.RU

Abstract

The paper discusses the issues of improving the security of remote administration through the use of domestic cryptographic algorithms when establishing SSH connections in the ALT Linux operating system. The relevance of the study is due to the need to comply with the requirements of Russian regulators in the field of information protection and reduce dependence on foreign cryptographic solutions. The problem lies in assessing the stability of SSH connections when using GOST algorithms and analyzing the impact of the chosen cryptographic policy on the possibility of unauthorized access and connection performance. The process of establishing and functioning an SSH connection is chosen as the object of research, and the subject is the behavior of the server when the client and server cryptographic sets do not match. To solve this problem, an experimental setup of an SSH server and client in ALT Linux was performed using gostcrypto packages implementing the Grasshopper, Magma algorithms and Stribog-based integrity control functions. The research methodology included modeling legitimate and illegitimate connection attempts, analyzing network traffic using Wireshark, as well as measuring bandwidth and resource load. The experimental results showed that a server configured to use only GOST algorithms effectively blocks connections with incompatible cryptographic parameters. If the client is configured correctly, the connection is stable and complies with the specified security policy. Performance measurements have demonstrated that the use of GOST encryption provides throughput comparable to standard OpenSSH algorithms, with a similar load on computing resources. The conclusion is made about the practical applicability of GOST encryption in SSH connections for secure administration in domestic operating systems.

Online viewer

References

  1. Alitsar A. Wireshark for everyone. Life hacks for every day [Electronic resource] // Habr. 2021. June 14. URL: https://habr.com/ru/companies/vdsina/articles/562110 / (date of reference: 12/01/2025).
  2. GOST R 34.10–2012. Information technology. Cryptographic protection of information. The processes of forming and verifying an electronic digital signature.
  3. GOST R 34.12–2015. Information technology. Cryptographic protection of information. Block ciphers.
  4. The official repository of ALT Linux packages [Electronic resource]. URL: https://packages.altlinux.org (date of request: 10.11.2025).
  5. Openssh-gostcrypto [Electronic resource] // ALT Linux Packages. URL: https://packages.altlinux.org/ru/p10/srpms/openssh-gostcrypto / (date of request: 12/11/2025).
  6. Openssl-gost-engine [Electronic resource] // ALT Linux Packages. URL: https://packages.altlinux.org/ru/p10/srpms/openssl-gost-engine / (date of request: 11.12.2025).
  7. Creation of SSH tunnels using integrity control of IP packet headers in accordance with GOST R 34.12-2015 [Electronic resource] // Documentation of ALT Linux. ALT Workstation 10.2. URL: https://docs.altlinux.org/ru-RU/alt-workstation/10.2/html/alt-workstation/ssh_t.html (date of request: 11.12.2025).
  8. Uimin A. G. Definition of a domestic technological platform within the framework of creating a cyber polygon: "Network and system administration" // Current challenges in personnel training. Training of specialists in modern areas of information technology, cybersecurity, and ICT electronics relevant to the data economy: a collection of scientific papers. Tver, 2024. pp. 122-123.

License

Copyright (c) 2026 D. V. Demidova, E. D. Komnatskaya (Author)

Keywords