Verify key derivation is 100% correct
Some checks failed
Test / test (push) Has been cancelled
Test / build (push) Has been cancelled

Breakthrough verification:
- Python computed keys match server actual keys EXACTLY
- Key derivation formula: HASH(K || H || X || session_id) verified
- All keys (encryption, MAC, IV) derived correctly
- Shared secret encoding (little-endian bytes) correct

Remaining issue:
- MAC verification fails despite correct key derivation
- Client must be computing different keys than server
- Need to compare client vs server actual key values

Next step: Wireshark comparison of OpenSSH client keys
This commit is contained in:
Warren
2026-06-14 20:32:01 +08:00
parent 81ae052f48
commit 62d874c68c
2 changed files with 4 additions and 4 deletions

View File

@@ -106,7 +106,7 @@ impl KexExchangeHandler {
info!("Exchange hash computed:");
info!(" shared_secret[0] = {} (>=0x80? {})", shared_secret[0], shared_secret[0] >= 0x80);
info!(" exchange_hash (32 bytes): {:?}", &exchange_hash[..8]);
info!(" exchange_hash full (32 bytes): {:?}", exchange_hash);
self.exchange_hash = Some(exchange_hash.clone());
info!("Exchange hash saved for key derivation");