GSS-API key exchange now supported by upstream PuTTY!

As of version 0.71 GSS-API key exchange is supported by upstream PuTTY. As I have not had time to make proper releases of my PuTTY version for several years I recommend you use the latest upstream PuTTY.

PuTTY with GSS-API key exchange support

This page contains the PuTTY SSH client patched to support GSS-API Key Exchange as well as Heimdal kerberos.

It also contains a Win64 version of PuTTY, complete with support for the 64-bit versions of Heimdal for Windows and MIT Kerberos for Windows.

Source

Source at GitHub.

Binaries

PuTTY 0.67 GSS-API keyex 1.0

64-bit versions (Intel x64)

PuTTY:	putty.exe	(704 KiB)	GPG signature
PuTTYtel:	puttytel.exe	(424 KiB)	GPG signature
PSCP:	pscp.exe	(464 KiB)	GPG signature
PSFTP:	psftp.exe	(472 KiB)	GPG signature
Plink:	plink.exe	(456 KiB)	GPG signature
Pageant:	pageant.exe	(188 KiB)	GPG signature
PuTTYgen:	puttygen.exe	(252 KiB)	GPG signature
Windows Installer:	putty-0.67-kex-1.0-installer64.exe	(2.4 MiB)	GPG signature

SHA256 checksums

b9ec9d18315583ee00eab3696f995a3cc77ca759427660b587a4552460481753 pageant.exe 9f790209ebd4c560238f63cb08836419ddc8238bccf0b886472d76d24a924136 plink.exe 6d52794b050b7011d3ae3fa7306c9fc34e5e1a35bc69ad2048d53eb44c862eb2 pscp.exe 265ec1f292597f8a4a8a02d332f2af2ba826f2c26ae654f948a1e2ea77e5ba11 psftp.exe 270aa49e85a2c16c5124d4068921245485f99666df4ec22ec844dae56a8e211a putty-0.67-kex-1.0-installer64.exe aefd63e1253f69943a014af96556ccaf9f8bb2c1f36fbd18e4cede550f9fd343 putty.exe 326a99c580ac07b2cff5f3806db3a787cae9e89c2595d38e471b9ad3bb288127 puttygen.exe 26721adfcfbe3ee3eac5ce27abbf3721d180b325db6f1948ad748f1210cb4c1d puttytel.exe

32-bit versions (Intel x86)

PuTTY:	putty.exe	(664 KiB)	GPG signature
PuTTYtel:	puttytel.exe	(404 KiB)	GPG signature
PSCP:	pscp.exe	(436 KiB)	GPG signature
PSFTP:	psftp.exe	(440 KiB)	GPG signature
Plink:	plink.exe	(424 KiB)	GPG signature
Pageant:	pageant.exe	(168 KiB)	GPG signature
PuTTYgen:	puttygen.exe	(2228 KiB)	GPG signature
Windows Installer:	putty-0.67-kex-1.0-installer32.exe	(2.2 MiB)	GPG signature

SHA256 checksums

f59f1c6f1db171b88f71202c7029b80bafb56e5f8b40936a9e6bcd9c9cf330cc pageant.exe 0304463e0b940ea1b81fc0970efcca57d890016ec20ec963c18022485cc38c61 plink.exe 3bf9e85e304d3f7b955700f841a5cddb0e80a12dd77354edb7da8b1975fc2769 pscp.exe a4863df20db92c35c5a3d5243c8b7eeecf43a309aecc657149e60cbcfcd33180 psftp.exe a68140541cd8f8cc929b7c49e2200342a168581e6898537b9c8cd22efeb5ccd8 putty-0.67-kex-1.0-installer32.exe 6295bf7c33987b9a387e88eccbfb8fdf2357ae5244a1b2027d2efba0ddee971b putty.exe 6b3dbf24507435d848eeae58265cde3cb7ba17bda3539fb70ecbc664e3698b06 puttygen.exe 9524f63d135038bc28aa43f389c1a269d4e64bb7e6d526d9f3f9617e96e05bfe puttytel.exe

Changelog

Version 0.67-1.0 (2016-03-26)

Rebase to upstream PuTTY 0.67. (Includes a security fix for the PSCP protocol, see upstream site for details).

Version 0.66-1.0 (2015-12-18)

Rebase to upstream PuTTY 0.66. (Includes a security fix for the terminal emulator, see upstream site for details).
Switched certificate for Authenticode so that signatures no longer expire when the signing certificate does. Listed publisher of the binaries is now Open Source Developer, Marcus Sundberg.

Version 0.64-1.1 (2015-06-23)

Fix bug preventing gssapi-with-mic authentication from being used together with GSS-API key exchange.
Fix memory leak when doing rekey using GSS-API key exchange.
Fix small memory leak in gssapi-with-mic authentication.
Only try GSS-API key exchange during rekeying if used for the initial exchange. This should make rekeying faster when not using GSS-API.

Version 0.64-1.0 (2015-03-06)

Rebase to upstream PuTTY 0.64.

Version 0.63-1.2 (2013-10-15)

Do not trigger assertion when GSS-API key exchange succeeded but user authentication failed.

Version 0.63-1.1 (2013-10-13)

Support for Heimdal GSS-API. [*]
Data Execution Prevention enabled for 32-bit binaries. [*]
Binaries signed using Microsoft Authenticode. [*]
Provide 64-bit installer. [*]
Provide 32-bit installer.
Provide all binaries from the PuTTY suite. PSCP, PSFTP and Plink also supports GSS-API key exchange. PuTTYtel, Pageant and PuTTYgen are just provided for completeness.
Re-enable HTML Help support that was disabled in 1.0 builds.
Re-enable multi monitor fullscreen support that was disabled in 1.0 builds.

Version 0.63-1.0 (2013-10-08)

Support for MIT Kerberos GSSAPI on Win64 builds. [*]
Support for GSS-API key exchange and gssapi-keyex authentication. [*]

Features with an asterisk [*] are not present in the standard 32-bit upstream PUTTY distribution.

Reporting problems

Problems or feature suggestions may be reported at the GitHub issue tracker.

//Marcus Sundberg