Skip to content

Generating Dropbear Host Keys and Configuration

Unlock the full potential of Dropbear SSH by mastering key generation and configuration. Explore the following examples to create and manage Dropbear host keys efficiently

Generating Dropbear Host Keys

Generate Dropbear RSA Host Key

dropbearkey -t rsa 2048 -f /etc/dropbear/dropbear_rsa_host_key

Generate Dropbear DSA Host Key

dropbearkey -t dsa 1024 -f /etc/dropbear/dropbear_dsa_host_key

Generate Dropbear ECDSA Host Key

dropbearkey -t ecdsa -f /etc/dropbear/dropbear_ecdsa_host_key

Generate Dropbear ED25519 Host Key

dropbearkey -t ed25519 -f /etc/dropbear/dropbear_ed25519_host_key

Dropbear Configuration Options

Start Dropbear SSH Server

dropbear -RFE -p 22

Specify Host Key Files

dropbear -r /etc/dropbear/dropbear_rsa_host_key -d /etc/dropbear/dropbear_dss_host_key

Specify Listen Address

dropbear -p 0.0.0.0:22

Disable Password Authentication

dropbear -s -g

Limit Maximum Number of Connections

dropbear -m 10

Set Log Level to Debug

dropbear -E

Miscellaneous Dropbear Commands

Convert Dropbear Key to OpenSSH Format

dropbearconvert dropbear openssh /etc/dropbear/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key_openssh

Convert OpenSSH Key to Dropbear Format

dropbearconvert openssh dropbear /etc/ssh/ssh_host_rsa_key /etc/dropbear/ssh_host_rsa_key_dropbear

Display Dropbear Version

dropbear -V

Check Dropbear Configuration Syntax

dropbear -t

Key dropbear keys

dropbearkey -t rsa 2048 -f /etc/dropbear/dropbear_rsa_host_key
dropbearkey -t dsa 1024 -f /etc/dropbear/dropbear_dsa_host_key
dropbearkey -t ecdsa -f /etc/dropbear/dropbear_ecdsa_host_key

Simple script to remove backdoors on Tilgin Routers (works for personal setups as well)

#! /bin/sh
#
# Remove backdoor keys and create our own for dropbear
#
# Copyright (C) 2023 wuseman
# Author: wuseman <wuseman@info-shell.se>
#
# $Id: create-dropbearkeys.sh 2023-01-05 01:24:00+0100 wuseman $
#

function dropbearServer() {
rm /var/miscA/dropbear_rsa_host_key
rm /var/miscA/dropbear_dss_host_key
mkdir -p /etc/dropbear
mknod -m 644 /dev/random c 1 8
mknod -m 644 /dev/urandom c 1 9

/usr/bin/dropbearkey -t rsa -s 2048 -f /etc/dropbear/dropbear_rsa_host_key
/usr/bin/dropbearkey -t dss -s 1024 -f /etc/dropbear/dropbear_rsa_host_key
/usr/bin/dropbearkey -t ecdsa -s 521 -f /etc/dropbear/dropbear_ecdsa_host_key

ln -s /etc/dropbear/dropbear_rsa_host_key /var/miscA/dropbear_rsa_host_key
ln -s  /etc/dropbear/dropbear_rsa_host_key /var/misc/dropbear_dss_host_key
ln -s  /etc/dropbear/dropbear_ecdsa_host_key /var/miscA/dropbear_ecdsa_host_kAey

/usr/sbin/dropbear \
  -F \
  -r /var/miscA/dropbear_rsa_host_key \
  -d /var/miscA/dropbear_dss_host_key -p 22
}

[[ -d "/etc/dropbear" ]] && dropbearServer

# Launch dropbear server Cancel
Footer


 /usr/sbin/dropbear \
  -F \
   -r /etc/dropbear/dropbear_rsa_host_key \
   -d /var/miscA/dropbear_dss_host_key \
   -p 22