Re: ssh-keygen and rsa Keys

From	Lars Noodén <lars.nooden@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: ssh-keygen and rsa Keys
Date	2016-09-27 08:00 +0200
Message-ID	<slTAR-5Dh-1@gated-at.bofh.it> (permalink)
References	<slNc5-1EV-11@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 09/27/2016 12:19 AM, Martin McCormick wrote:
>...
> 	The short story is that the Mac now uses openssh-7
> instead of open-ssh-6. Dsa encryption keys have been declared
> obsolete for some time now and openssh-7 defaults to ignoring
> any id_dsa.pub keys you might have been using.
>...

That brings up two things to my mind.

First is with client authentication that one should start planning ahead
for elliptical curve cryptography :

https://www.gnupg.org/faq/gnupg-faq.html#please_use_ecc

Ed25519 seems to be the way forward there, for now.

Second, the server identification keys ought to be addressed too, so
that DSA is also turned off there.  The servers are targets for MitM
attacks if they leave up the option for host identification via DSA
keys.  Turning off DSA requires a bit of planning if there are many
accounts using the server.

Regards,
Lars

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

ssh-keygen and rsa Keys "Martin McCormick" <martin.m@suddenlink.net> - 2016-09-27 01:10 +0200
  Re: ssh-keygen and rsa Keys Lars Noodén <lars.nooden@gmail.com> - 2016-09-27 08:00 +0200

csiph-web