Although SSH can be used with passwords, a sysadmin may need to use ssh hundreds of times a day, and typing passwords that often can become tedious. SSH therefore permits authentication using public and private keys.
== Background: Public Key Cryptography ==
In a nutshell, public key cryptography works like this:# A large random number is generated.# That number is used to derive two mathematically-related but different keys. Each key is also a large number.# Data can be encrypted by processing one of the keys and the data to be encrypted using an encryption algorithm. Once encrypted, the data appears to be a meaningless stream of numbers.# The encrypted data cannot be decrypted using the original key, yielding the original data. However, it can be decrypted using the other key, and vice-versa. To use public key cryptography:# One key is designated as the "public key" and one is designated as the "private key".#* The public key is distributed to all of the parties with whom you will be communicating. In fact, it can be communicated to anyone in the world.#* The private key is ''never'' shared with anyone.# Messages encrypted with your private key can only be decrypted with your public key, proving that the message came from you (authentication)# Messages encrypted with your public key can only be decrypted with your private key, ensuring that only you can read them (privacy).# To both ensure privacy and authentication on messages between you and another party, encrypt the message twice: once with your private key and once with their public key. Practical considerations:# The algorithms used in public-key cryptography are very slow. Therefore, it's common to use public key cryptography to exchange a key for a faster, symmetrical cypher, and then use that cypher See [[Public Key Cryptography]] for the actual data stream.# ''Signing'' a message means authenticating it by taking a checksum (hash) of the message and encrypting that. This is faster than encrypting the entire message.# Public key cryptography is very susceptible to the manipulation of public keys by an attacker interposed between the two parties at the time that the public keys are shared (e.g., when someone is downloading your public key from your website).# Public key cryptography is susceptible to theft overview of the private key (e.g., hacking your system, or stealing your laptop). The private key is therefore often protected with a passphrasehow this technology works.
== Using Public Keys with SSH ==