i came across this question and have been thinking about it without a final solution. The question is to design a secure telnet. essentially to login using a username and password using telnet. I do not have ssh. The restriction is that i cannot use any public key encryption anywhere in the protocol. My initial thought was that the password will be hashed and sent to the server which has the salted hashes stored. Of course, this is open to man in the middle as attacker can just store the hash sent by the client and replay it. So one solution i was thinking for this was to use a per session nonce which can be "attached" to the password hash and hashed again to be sent over. But now the problem is what is this "nonce" and how to negotiate it between client/server while protecting from mitm ? No public keys allowed, so TLS isn't a possibility
Thanks