ssh-agent – What does this process do?
Solution 1:
No, this is not something to be concerned about. This is ssh-agent
, not sshd
, which is the SSH daemon. If you have a look at man ssh-agent
:
ssh-agent is a program to hold private keys used for public key
authentication (RSA, DSA, ECDSA, ED25519). The idea is that ssh-agent is
started in the beginning of an X-session or a login session, and all
other windows or programs are started as clients to the ssh-agent
program.
The way it works is that when you use SSH to connect to somewhere (the command-line client ssh
is installed by default, and other programs, like the file browser can also act as SSH clients), the connecting program will use the agent instead of loading the private key itself:
The agent will never send a private key over its request channel.
Instead, operations that require a private key will be performed by the
agent, and the result will be returned to the requester. This way,
private keys are not exposed to clients using the agent.
The benefits are that you only need to unlock the private key once per session (the agent will then store it in memory), and clients never see your unencrypted private key directly.
It's the opposite of a backdoor, in a way.