Crossing the Streams: SSH Plaintext Recovery via a Common Compression Context in Multiplexed Channels

• URL: http://arxiv.org/abs/2609.07709v1
• Date: Mon, 07 Sep 2026 16:19:50 GMT
• Title: Crossing the Streams: SSH Plaintext Recovery via a Common Compression Context in Multiplexed Channels
• Abstract summary: We show that SSH channel multiplexing creates a previously unrecognized compression side channel.<n>An attacker can inject partially chosen plaintext into a channel and observe the length of the resulting ciphertext on the network.<n>This enables an adaptive chosen-plaintext attack that recovers secrets from one channel by interacting with another.
• Score: 3.731289189298451
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: SSH is the standard protocol for secure remote administration of servers. At the transport layer, SSH uses the Binary Packet Protocol (BPP) for encrypted and authenticated communication. Above this, the SSH Connection Protocol multiplexes one or more logical channels over a single connection, supporting interactive shells, port forwarding, and related functionality. We show that SSH channel multiplexing creates a previously unrecognized compression side channel: all channels on a connection share the same compression context. When compression is enabled, an attacker can inject partially chosen plaintext into a channel and observe the length of the resulting ciphertext on the network. This enables an adaptive chosen-plaintext attack that recovers secrets from one channel by interacting with another. While related attacks such as CRIME and BREACH have been studied extensively for HTTP over TLS, this is, to our knowledge, the first compression side-channel attack on SSH and the first SSH analysis to consider a combined passive eavesdropper and web attacker threat model. We further demonstrate the attack in three different application scenarios and evaluate its effectiveness under varying levels of protocol noise. We find that, in the lowest-noise scenario, an 8-character secret over a 26-letter alphabet can be recovered using at most 276 guesses. Finally, we analyze the SSH ecosystem for compression support and other implementation characteristics that influence the practical efficacy of the attack.

Related papers

• Communication-Efficient LLM Adaptation over Decentralized GPU Meshes [48.95736135870457]
  We propose an asynchronous two-circuit system for post-pretraining adaptation.<n>A fast compressed training circuit drives throughput using masking activation for pipeline-parallel transfer and compressed data-parallel synchronization.<n>We show that masking supports post-pretraining adaptation at high compression rates when anchored this way.
  arXiv  Detail & Related papers  (2026-09-13T06:56:50Z)
• A Drop-in KEM Replacement for Client Signatures in Post-Quantum SSH [14.359480576200212]
  Post-quantum cryptography is reshaping the Secure Shell (SSH) protocol for remote administration.<n>We present a drop-in KEM-based user-authentication method for SSH that replaces client public-key signatures with a session-bound challenge-response proof.
  arXiv  Detail & Related papers  (2026-08-25T12:01:47Z)
• Visual Token Codec: Unleashing Spatial Redundancy for ViT Feature Coding [49.540751364954666]
  Visual Token Codec separates global and patch tokens into dedicated coding paths.<n>We show that VTC consistently outperforms representative ViT feature coding baselines on classification, segmentation, and detection tasks.
  arXiv  Detail & Related papers  (2026-08-09T17:32:04Z)
• VoxZip: Semantic-Anchored Temporal KV Cache Compression for Long-Context Audio Inference [53.883871460875234]
  VoxZip is a semantic-anchored KV cache compression framework.<n>First stage uses automatic speech recognition (ASR) transcriptions as explicit semantic anchors to temporally align, compress, and fuse audio tokens.<n>Second stage employs a dynamic filtering strategy based on temporally decayed accumulated attention to evict non-essential tokens.
  arXiv  Detail & Related papers  (2026-08-09T08:17:18Z)
• Side-Channel Attacks on Open vSwitch [1.1352077875520463]
  The Open vSwitch (OVS) is one of the most popular software-based virtual switches.<n>We present three remote attacks via OVS, breaking the confidentiality in covert environments.
  arXiv  Detail & Related papers  (2026-01-22T04:12:03Z)
• Finding SSH Strict Key Exchange Violations by State Learning [9.954798022417135]
  SSH is an important protocol for secure remote shell access to servers on the Internet.<n>At USENIX 2024, B"aumer et al. presented the Terrapin attack on SSH, which relies on the attacker injecting optional messages during the key exchange.<n>To mitigate this attack, SSH vendors adopted an extension developed by OpenSSH called strict key exchange ("strict KEX").<n>With strict KEX, optional messages are forbidden during the handshake, preventing the attack.
  arXiv  Detail & Related papers  (2025-09-13T16:54:10Z)
• SSH-Passkeys: Leveraging Web Authentication for Passwordless SSH [11.865671333047658]
  Passwords remain the dominant mode of SSH authentication, despite their well known flaws such as phishing and reuse.<n>WebAuthn is a modern authentication standard designed to replace passwords, managing keys on behalf of the user.<n>We propose a framework to integrate WebAuthn with SSH servers, by using UNIX pluggable authentication modules (PAM)
  arXiv  Detail & Related papers  (2025-07-11T21:13:09Z)
• Embedding Compression Distortion in Video Coding for Machines [67.97469042910855]
  Currently, video transmission serves not only the Human Visual System (HVS) for viewing but also machine perception for analysis.<n>We propose a Compression Distortion Embedding (CDRE) framework, which extracts machine-perception-related distortion representation and embeds it into downstream models.<n>Our framework can effectively boost the rate-task performance of existing codecs with minimal overhead in terms of execution time, and number of parameters.
  arXiv  Detail & Related papers  (2025-03-27T13:01:53Z)
• Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior [118.92747171905727]
  This paper introduces a novel frequency-based trigger injection model for launching backdoor attacks with multiple triggers on learned image compression models.<n>We design attack objectives tailored to diverse scenarios, including: 1) degrading compression quality in terms of bit-rate and reconstruction accuracy; 2) targeting task-driven measures like face recognition and semantic segmentation.<n>Experiments show that our trigger injection models, combined with minor modifications to encoder parameters, successfully inject multiple backdoors and their triggers into a single compression model.
  arXiv  Detail & Related papers  (2024-12-02T15:58:40Z)
• Human-Interpretable Adversarial Prompt Attack on Large Language Models with Situational Context [49.13497493053742]
  This research explores converting a nonsensical suffix attack into a sensible prompt via a situation-driven contextual re-writing. We combine an independent, meaningful adversarial insertion and situations derived from movies to check if this can trick an LLM. Our approach demonstrates that a successful situation-driven attack can be executed on both open-source and proprietary LLMs.
  arXiv  Detail & Related papers  (2024-07-19T19:47:26Z)
• SMC++: Masked Learning of Unsupervised Video Semantic Compression [58.345380470925456]
  We propose a Masked Video Modeling (MVM)-powered compression framework that particularly preserves video semantics.<n>MVM is proficient at learning generalizable semantics through the masked patch prediction task.<n>It may also encode non-semantic information like trivial textural details, wasting bitcost and bringing semantic noises.
  arXiv  Detail & Related papers  (2024-06-07T09:06:40Z)
• Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation [11.499428847222099]
  We show that the SSH Binary Packet Protocol is no longer a secure channel. This allows prefix truncation attacks where encrypted packets at the beginning of the SSH channel can be deleted without the client or server noticing it. We propose effective and backward-compatible changes to SSH to mitigate our attacks.
  arXiv  Detail & Related papers  (2023-12-19T18:51:12Z)
• Single-path Bit Sharing for Automatic Loss-aware Model Compression [126.98903867768732]
  Single-path Bit Sharing (SBS) is able to significantly reduce computational cost while achieving promising performance. Our SBS compressed MobileNetV2 achieves 22.6x Bit-Operation (BOP) reduction with only 0.1% drop in the Top-1 accuracy.
  arXiv  Detail & Related papers  (2021-01-13T08:28:21Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.