SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol

E248469

IETF specification RFC SSH extension specification

"SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol" is an IETF specification that updates SSH to use SHA-2-based message authentication codes to improve data integrity and security over the transport layer.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol canonical	2
SSH Transport Layer Protocol	2
SSH MAC Algorithm Names	1
SSH-2 protocol suite	1

How this entity was disambiguated

This entity first appeared as the object of triple T2236380 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
Context triple: [RFC 6668, title, SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol]

A. The Secure Shell (SSH) Authentication Protocol
The Secure Shell (SSH) Authentication Protocol is a standardized network protocol that defines methods for securely authenticating users and hosts in SSH connections using mechanisms such as passwords, public keys, and keyboard-interactive methods.
B. SSH Communications Security
SSH Communications Security is a Finnish cybersecurity company best known for developing and commercializing the Secure Shell (SSH) protocol and related secure communications solutions.
C. Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)" is an IETF standard (RFC 7919) that defines secure, standardized finite-field Diffie-Hellman parameter sets for use in TLS to improve cryptographic security and interoperability.
D. Secure Authentication Version 5
Secure Authentication Version 5 is a security enhancement for the DNP3 protocol that provides robust authentication and protection against unauthorized control and cyber attacks in industrial control systems.
E. Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol
Target entity description: "SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol" is an IETF specification that updates SSH to use SHA-2-based message authentication codes to improve data integrity and security over the transport layer.

A. The Secure Shell (SSH) Authentication Protocol
The Secure Shell (SSH) Authentication Protocol is a standardized network protocol that defines methods for securely authenticating users and hosts in SSH connections using mechanisms such as passwords, public keys, and keyboard-interactive methods.
B. SSH Communications Security
SSH Communications Security is a Finnish cybersecurity company best known for developing and commercializing the Secure Shell (SSH) protocol and related secure communications solutions.
C. Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)" is an IETF standard (RFC 7919) that defines secure, standardized finite-field Diffie-Hellman parameter sets for use in TLS to improve cryptographic security and interoperability.
D. Secure Authentication Version 5
Secure Authentication Version 5 is a security enhancement for the DNP3 protocol that provides robust authentication and protection against unauthorized control and cyber attacks in industrial control systems.
E. Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
F. None of above. chosen

Statements (42)

Predicate	Object
instanceOf	IETF specification ⓘ RFC ⓘ SSH extension specification ⓘ
aimsTo	align SSH with modern cryptographic best practices ⓘ deprecate legacy MAC algorithms in SSH ⓘ
appliesToLayer	transport layer ⓘ
area	Security ⓘ
belongsToFamily	SSH-related RFCs ⓘ
benefit	stronger resistance to collision attacks ⓘ stronger resistance to forgery of SSH packets ⓘ
category	cryptographic protocol specification ⓘ security protocol enhancement ⓘ
concerns	cryptographic hash functions ⓘ keyed message authentication codes ⓘ
context	secure remote login and data transfer ⓘ
defines	SHA-2-based message authentication codes for SSH ⓘ
definesUsage	how SHA-2 MACs protect SSH transport packets ⓘ how SSH peers negotiate SHA-2-based MAC algorithms ⓘ
focusesOn	hash-based message authentication ⓘ message authentication codes (MACs) ⓘ
improves	robustness of SSH against cryptanalytic advances ⓘ
intendedAudience	SSH library and server developers ⓘ security protocol implementers ⓘ
layeredOn	Transmission Control Protocol ⓘ surface form: TCP
objective	to mitigate weaknesses of older hash functions in SSH ⓘ to provide stronger cryptographic primitives for SSH ⓘ
partOf	SSH security architecture ⓘ
protocol	SSH ⓘ
publishedBy	Internet Engineering Task Force ⓘ
purpose	to improve cryptographic security of SSH message authentication ⓘ to improve data integrity for SSH transport layer ⓘ
relatedTo	SSH security hardening ⓘ cryptographic algorithm agility in SSH ⓘ
replaces	weaker hash-based MACs in SSH ⓘ
securityProperty	data integrity ⓘ message authentication ⓘ
standardizes	use of SHA-2 MACs in SSH transport ⓘ
standardType	Internet Standard track document ⓘ
status	standards-track specification ⓘ
title	SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol self-link ⓘ
updatesProtocol	The Secure Shell (SSH) Authentication Protocol ⓘ surface form: Secure Shell (SSH) Transport Layer Protocol
usesAlgorithmFamily	SHA-2 ⓘ

How these facts were elicited

Referenced by (6)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 6668 → title → SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol ⓘ

RFC 2419 → updatesProtocol → SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol ⓘ

this entity surface form: SSH Transport Layer Protocol

RFC 4250 → definesRegistry → SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol ⓘ

this entity surface form: SSH MAC Algorithm Names

SFTP (SSH File Transfer Protocol) → introducedIn → SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol ⓘ

subject surface form: SFTP

this entity surface form: SSH-2 protocol suite

SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol → title → SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol self-link ⓘ

SSH Message Numbers → scope → SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol ⓘ