janmojzis/tinyssh

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1524 stars · 84 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TinySSH (tinysshd) is a minimalistic SSHv2 server written in C with under 100,000 words of code, implementing only a secure subset of the protocol. It supports modern and post-quantum cryptography (ed25519, curve25519, sntrup761x25519, chacha20-poly1305) and avoids unsafe legacy features and dynamic memory allocation.

Use cases

• run a minimal secure ssh server on a linux box
• replace openssh with a smaller ssh daemon
• ssh server with post-quantum key exchange
• minimal ssh server for embedded or resource-constrained systems
• public-key-only ssh server without password authentication
• run sshd under inetd or systemd socket activation

When to choose

• you need a tiny, auditable SSH server with only modern crypto
• you want public-key-only authentication with no password logins
• you need post-quantum key exchange support
• you run SSH from inetd, tcpserver, busybox, or systemd sockets
• you want a server with no dynamic memory allocation for reliability

When to avoid

• you need port forwarding, agent forwarding, X11 forwarding, or compression
• you need SSH1 protocol or legacy crypto compatibility (RSA, DSA, 3DES)
• you need password or hostbased authentication
• you need a full-featured SSH server for general-purpose use

Facets

application · maturity active

ssh security cryptography http-server security developer-tools self-hosted operating-systems cli self-hosted cross-platform ssh-server minimalistic post-quantum-crypto ed25519 c-server no-dynamic-allocation linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="janmojzis/tinyssh")