Technical specification
- Feature list
- Available editions
- Supported platforms
- Development tools
Feature list
Miss a feature? Tell us about your idea using Wish List.
SSH Protocol implementation contains the following features, common to both client-side and server-side components:
- support for SSH 2 protocol
in client and server components;
- support for SSH 1 protocol in client components;
- support for public-key, host-based, password-based, keyboard-interactive, GSS-API (Kerberos, NTLM, custom schemes), OpenPGP key and X.509 certificate authentication
;
- support for use of multiple authentication types at the same time
;
- flexible support for key validation
;
- support for RSA and DSA public key algorithms
;
- data encryption with AES (128 to 256 bit), Triple DES (3DES), DES, Blowfish, Twofish, Serpent (128 to 256 bit), CAST128 algorithms
;
- integrity checking using SHA1 and MD5 algorithms
;
- ZLib compression
;
- asynchronous operation mode which lets you easily build synchronous and asynchronous applications
;
- data transfer using events/callbacks, i.e. possibility to secure not only socket-based, but also other types of data exchange
- (optional) FIPS-compliant operation mode
SSH Tunnels are supported by client-side and server-side components. Support options include:
- support for shell, command, port forwarding (local and remote), X11 and custom subsystem tunnels
;
- support for SFTP subsystem (SFTPBlackbox is required);
- support for dynamic tunnels (SSH2 only). With dynamic tunnels one can create and close logical connections within single SSH connection
;
- possibility to create custom subsystem handlers
SSH Keys management lets you create and manage SSH keys, necessary to authenticate the clients and servers in SSH mode. Key management offers:
- generation of RSA and DSA (DSS) keys;
- saving and loading of SSH keys in OpenSSH, IETF and PuTTY formats;
- support for key length from 512 to 16384 bits;
ElSimpleSSHClient is a basic SSH client, which encapsulates several SSH components inside and offers:
- shell or command tunnel inside
;
- (optional) built-in TCP socket with support for WebTunneling (HTTP CONNECT) and SOCKS proxies
;
- synchronous interface
;
- bandwidth control
;
- IPv6 support
;
- International Domain Names (IDN) support
;
- DNSSEC support
PKI Infrastructure - besides SSH features, SSHBlackbox includes base functions of PKIBlackbox.
Miss a feature? Tell us about your idea using Wish List.
Available editions
SSHBlackbox is available in several editions for various software platforms.
.NET edition.
This edition of SSHBlackbox includes pure managed components, carefully optimized to achieve maximum performance, comparable to native processor code.
.NET edition can be used on
- .NET Framework 4.0
- .NET Framework 3.5
- .NET Framework 3.0
- .NET Framework 2.0
- .NET Framework 1.1
- Windows Phone 7 Mango
- Windows Phone 7
- Silverlight 5
- Silverlight 4
- Silverlight 3
- Mono 2.0
- Mono 1.0
- .NET CF (Compact Framework) 3.5
- .NET CF 2.0
- .NET CF 1.0.
.NET edition can be used on ASP.NET server systems, Windows desktop systems, Windows Mobile PDAs, Silverlight-enabled browsers, Windows Phone 7 smartphones, on Linux and MacOS X systems with Mono installed.
VCL edition.
Blazingly fast native Delphi (Pascal) components for building native Windows, Linux and MacOS X applications. Usable with
- Delphi (from Delphi 4 to the most recent Delphi XE2)
- C++Builder (from C++Builder 2007 to the most recent C++ Builder XE2)
- FreePascal 2.4 for Win32, Win64, Linux/x86, Linux/x64, MacOS X
VCL edition works on any computer with Windows 2000 and later or with Linux kernel 2.4 and later.
ActiveX/DLL edition.
ActiveX controls and Dynamically-Linked Libraries are useable with virtually any development tool, which supports ActiveX or DLLs.
This includes ASP web pages, Visual Basic 6 applications, native C/C++ applications for Windows, shell and server-side scripts.
ActiveX/DLL edition works on any computer with Windows 98 and later.
Java edition (DEVELOPER PREVIEW).
Java library can be used with Java Standard Edition or Enterprise Edition version 6 or later.
Also Java edition can be used on Android devices with Android 2.2 and later.
Supported platforms
- Windows:
- Windows 2008 R2 Server (32-bit, 64-bit AMD64 and 64-bit Itanium)
- Windows 7 (32-bit, 64-bit AMD64 and 64-bit Itanium)
- Windows 2008 Server (32-bit, 64-bit AMD64 and 64-bit Itanium)
- Windows Vista (32-bit, 64-bit AMD64 and 64-bit Itanium)
- Windows 2003 Server (32-bit, 64-bit AMD64 and 64-bit Itanium)
- Windows XP (32-bit, 64-bit AMD64 and 64-bit Itanium)
- Windows 2000
- Microsoft .NET Framework:
- .NET 4.0 (32-bit, 64-bit AMD64 and 64-bit Itanium)
- .NET 3.5 (32-bit, 64-bit AMD64 and 64-bit Itanium)
- .NET 3.0 (32-bit, 64-bit AMD64 and 64-bit Itanium)
- .NET 2.0 (32-bit, 64-bit AMD64 and 64-bit Itanium)
- .NET 1.1 (32-bit)
- Silverlight:
- Silverlight 5
- Silverlight 4
- Silverlight 3
- Windows Phone:
- Windows Phone 7 Mango (7.1/7.5?)
- Windows Phone 7
- .NET Compact Framework:
- .NET CF 3.5
- .NET CF 2.0
- .NET CF 1.0
- Mono:
- Linux:
- Linux distributions with kernel version 2.6 or later on x86 and x64 platforms
Development tools
Various editions of SSHBlackbox are used with different development tools:
.NET edition of SSHBlackbox can be used with
- MS Visual Studio 2010
- MS Visual Studio 2008
- MS Visual Studio 2005
- MS Visual Studio .NET 2003
- CodeGear RAD Studio 2010 (Delphi Prism)
- CodeGear RAD Studio 2009 (Delphi Prism)
- Borland Developer Studio 2006 (C# Builder personality)
- Borland Delphi 2005 (C# Builder personality)
- Borland Delphi 8
- Borland C# Builder
- MONO development tools
VCL edition of SSHBlackbox is offered for
- Embarcadero RAD Studio XE2 (Delphi/Win32, Delphi/Win64 and C++Builder/Win32 platforms)
- Embarcadero C++Builder XE2 (C++Builder/Win32 platform)
- Embarcadero Delphi XE2 (Delphi/Win32 and Delphi/Win64 platforms)
- Embarcadero RAD Studio XE (Delphi/Win32 and C++Builder personalities)
- Embarcadero C++Builder XE
- Embarcadero Delphi XE
- Embarcadero RAD Studio 2010 (Delphi/Win32 and C++Builder personalities)
- Embarcadero C++Builder 2010
- Embarcadero Delphi 2010
- CodeGear RAD Studio 2009 (Delphi/Win32 and C++Builder personalities)
- CodeGear C++Builder 2009
- CodeGear Delphi 2009
- CodeGear RAD Studio 2007 (Delphi/Win32 and C++Builder personalities)
- CodeGear C++Builder 2007
- CodeGear Delphi 2007
- Borland Developer Studio 2006 (Delphi/Win32 and C++Builder personalities)
- Borland Delphi 2005 (Delphi/Win32 personality)
- Borland Delphi 4-7
- FreePascal 2.0.2 or later (Win32 and Linux / x86)
DLL/ActiveX edition can be used with
- MS Visual Basic 6 (ActiveX only)
- MS Visual C++ 6.0 (ActiveX and DLL)
- JScript and VBScript (ActiveX, not all controls)
- MS Visual Studio .NET and MS Visual Studio .NET 2003 via COM interop. Not recommended, use .NET edition instead
Java edition (DEVELOPER PREVIEW) can be used with
- Any development tool that targets Java or Android
Miss a feature? Tell us about your idea using Wish List.
Licensing and use
SSHBlackbox can be licensed in one of the following packages:
- SecureBlackbox Professional
- SecureBlackbox Standard
- SecureBlackbox Transports
- SFTPBlackbox client+server
- SFTPBlackbox client
- SSHBlackbox client+server
- SSHBlackbox client
Compression gives an additional level of security and lets you increase transfer speed significantly and reduce the network load and storage space requirements.
Synchronous operation mode gives you a linear programming approach without complicated callback functions. This approach saves your development time and reduces the number of errors.
Asynchronous operation mode, on the other hand, gives you flexibility and complete control over your application communications.
Synchronous operation mode gives you a linear programming approach without complicated callback functions. This approach saves your development time and reduces the number of errors.
Simple SecureBlackbox components can be used for reliable data transfer no matter what type of proxy or firewall is used to protect the network.
HTTPS proxy access includes support for Basic, Digest and Windows Integrated (NTLM) authentication mechanisms.
You can process huge files and not be bound by restrictions of 32-bit environments. This feature works on both 32-bit and 64-bit systems without any limitations.
To limit and control network load and bandwidth consumption you can setup maximum upload and download speed for the data transfer components.
Transport (SSL, FTP, HTTP, SMTP, POP3, WebDAV, LDAP, SSH, SFTP) components can be used in IPv6 networks without any problems, address conversions or packet wrapping.
Transport (SSL, FTP, HTTP, SMTP, POP3, WebDAV, LDAP, SSH, SFTP) components understand and make use of non-latin domain names (so-called International Domain Names, IDN).
In FIPS operation mode SecureBlackbox uses only certified CryptoAPI modules of Windows to perform any cryptographic operations.
FIPS mode is available only on Windows platform.
Virtual File System adapters let SecureBlackbox components, which operate with files, work with various backend file storages and not just with "physical" disk.
For example, in WebDAV, SFTP, HTTP(S) and FTP(S) servers you can provide a personal storage space for each connected user.
Out of the box file system adapter and SolFS virtual file system adapter are included and you can easily create your own adapter.
With DNSSEC support enabled you protect your socket connection from being fooled by possible DNS cache poisoning and other malicious DNS activities.
DNSSEC requires that the DNS record for the destination server contains a certified signature.
Distributed Crypto modules let web site visitors use certificates accessible only on the client system to sign the data, stored on the server (no need to download this data).
This is done with help of client-side modules (Java applet, ActiveX control, Flash applet), embedded into the web page.
Cryptographic hardware gains more and more popularity every day. If your software deals with X.509 certificates or PKI in general (RSA keys etc.), it is time to support cryptocards and USB tokens.
To use cryptographic hardware you need a license for PKIBlackbox.
SecureBlackbox was written from the ground up by EldoS Corporation developers.
It doesn't use third-party code to implement its cryptographic functions.
This means that you are not bound by CryptoAPI or OpenSSL version when you need to use certain algorithm.
At the same time it's possible to plug third-party security libraries and hardware modules by utilizing the pluggable architecture of SecureBlackbox.
No royalties means the licensing procedure which is clear and easy to understand and manage. Pay for the license once and use it for development and deployment with no other payments.
We provide free technical support via web-based Forum and HelpDesk. Support is available for everyone, and the requests from clients who purchased a license are given priority.
Also you can use our extensive knowledgebase.
With SecureBlackbox you can create and convert SSH keys without the need for external key management software.
SSHBlackbox package includes functions that let you generate and manage SSH keys in several formats.
With the wide choice of encryption, authentication and key exchange algorithms supported by SSHBlackbox, you will be able to meet the security requirements and get compatibility with the wide choice of differently configured servers and clients.
SSH and SFTP protocols offer the number of very useful features, which don't actually require TCP transport. The protocols can be used with any low-level transport protocols, and SecureBlackbox makes this possible.
SSH protocol can transport many connections of different types over one secured SSH connection. Tunnels are the types of simultaneous transport that you can use.
It's handy to have an SFTP tunnel used in parallel with SSH shell tunnel so that you can transfer files and operate remote system at the same time.
SecureBlackbox supports all types of tunnels, defined by SSH protocol specification.
SSH protocol can transport many connections of different types over one secured SSH connection. Tunnels are the types of simultaneous transport that you can use.
Ability to open and close connections on-the-fly extends your possibilities and adds flexibility to your application.
SSH protocol can transport many connections of different types over one secured SSH connection. Tunnels are the types of simultaneous transport that you can use.
Ability to create custom tunnel types (subsystems) extends your possibilities and adds flexibility to your application.
Shell and command tunnels are used to execute commands on the remote system by using terminal / shell application (in shell tunnels) or by executing the commands directly (using command tunnels).
Support for both types of tunnels adds flexibility to your application by letting you execute commands without parsing the shell prompts and extra messages or emulating a full-featured terminal.
With extensive authentication support you can build multi-level authentication schemes, thus increasing security and reducing the risks when the sensitive resources are accessed.
|
Clients say
Using SecureBlackbox, I managed to convert my insecure application into a secure one in less than an hour ...
Latest version
9.1.214
Released 30 January 2012
|