DeriveTLSPassthroughKey derives a TLS passthrough key from a master obfuscated key.

MakeTLSPassthroughMessage generates a unique TLS passthrough message using the passthrough key derived from a master obfuscated key.

NewClientObfuscatedSSHConn creates a client ObfuscatedSSHConn.

NewClientObfuscator creates a new Obfuscator, staging a seed message to be sent to the server (by the caller) and initializing stream ciphers to obfuscate data.

NewObfuscatedSSHConn creates a new ObfuscatedSSHConn.

NewSeedHistory creates a new SeedHistory.

NewServerObfuscatedSSHConn creates a server ObfuscatedSSHConn.

NewServerObfuscator creates a new Obfuscator, reading a seed message directly from the clientReader and initializing stream ciphers to obfuscate data.

VerifyTLSPassthroughMessage checks that the specified passthrough message was generated using the passthrough key.

OpenSSH max packet length.

RFC 4253 sec.

uint32 + byte.

Default cipher block size.

ObfuscatedSSHConn wraps a Conn and applies the obfuscated SSH protocol to the traffic on the connection: https://github.com/brl/obfuscated-openssh/blob/master/README.obfuscation ObfuscatedSSHConn is used to add obfuscation to golang's stock "ssh" client and server without modification to that standard library code.

Obfuscator implements the seed message, key derivation, and stream ciphers for: https://github.com/brl/obfuscated-openssh/blob/master/README.obfuscation Limitation: the RC4 cipher is vulnerable to ciphertext malleability and the "magic" value provides only weak authentication due to its small size.

ObfuscatorConfig specifies an Obfuscator configuration.

SeedHistory maintains a history of recently observed obfuscation seed values.