lsh

{{Short description|Cryptographic network protocol}}

{{Other uses|LSH (disambiguation)}}

{{lowercase title|title=lsh}}

{{more citations needed|date=March 2017}}

{{Infobox software

| name = lsh

| logo =

| caption =

| screenshot =

| developer = Niels Möller

| released = {{Start date and age|1998|09}}{{cite web|url=http://www.lysator.liu.se/~nisse/archive/lsh-snapshot-19980908.tar.gz|title=Initial release of snapshot version of lsh}}

| latest release version = {{wikidata|property|preferred|references|edit|Q307566|P348|P548=Q2804309}}

| latest release date = {{wikidata|qualifier|preferred|single|Q307566|P348|P548=Q2804309|P577}}

| latest preview version = {{wikidata|property|preferred|references|edit|Q307566|P348|P548=Q51930650}}

| latest preview date = {{wikidata|qualifier|preferred|single|Q307566|P348|P548=Q51930650|P577}}

| operating_system = Unix-like

| genre = Networking, Security

| license = GPL-2.0-or-later

| website = {{URL|www.lysator.liu.se/~nisse/lsh/}}

}}

lsh is a copyleft implementation of the Secure Shell (SSH) protocol version 2, by the GNU Project including both server and client programs. Featuring Secure Remote Password protocol (SRP) as specified in secsh-srp{{cite journal|url=https://tools.ietf.org/html/draft-nisse-secsh-srp-01.html|title=Using the SRP protocol as a key exchange method in Secure Shell|first=Niels|last=Moller |website=tools.ietf.org|date=30 March 2001|accessdate=16 January 2019}}{{Cite web |url=http://tools.ietf.org/id/draft-nisse-secsh-srp-01.txt |title=Archived copy |access-date=2014-02-06 |archive-date=2016-03-03 |archive-url=https://web.archive.org/web/20160303215259/http://tools.ietf.org/id/draft-nisse-secsh-srp-01.txt |url-status=dead }} besides, public-key authentication. Kerberos is somewhat supported as well.{{Citation needed|date=July 2010}} Currently however for password verification only, not as a single sign-on (SSO) method.{{Citation needed|date=July 2010}}

lsh was started from scratch and predates OpenSSH.{{Citation|title=Comparison of SSH servers|date=2020-05-30|url=https://en.wikipedia.org/w/index.php?title=Comparison_of_SSH_servers&oldid=959749610|work=Wikipedia|language=en|access-date=2020-06-02}}

Karim Yaghmour concluded in 2003 that lsh was "not fit for use" in production embedded Linux systems, because of its dependencies upon other software packages that have a multiplicity of further dependencies. The lsh package requires the GNU MP library, zlib, and liboop, the latter of which in turn requires GLib, which then requires pkg-config. Yaghmour further notes that lsh suffers from cross-compilation problems that it inherits from glib. "If ... your target isn't the same architecture as your host," he states, "LSH isn't a practical choice at this time."

Debian provides packages of lsh as lsh-server,{{cite web|url=https://packages.debian.org/search?searchon=names&keywords=lsh-server|title=Debian -- Package Search Results -- lsh-server|website=packages.debian.org|accessdate=16 January 2019}} lsh-utils, lsh-doc and lsh-client.{{cite web|url=https://packages.debian.org/squeeze/lsh-server|title=Debian -- Error|website=packages.debian.org|accessdate=16 January 2019}}