Post #1544725
2024-04-16 10:49 UTC
@simontatham Given that that's 3 additional clicks in the PuTTYgen UI (ECDSA, Dropdown, nistp521) I can almost assure we won't have any in our enterprise.
Surprised to see that the default in PuTTYgen 0.81 is still RSA, and only 2048 bits. Ed25519 even works with RHEL 7 (EoL 2024-06-30).
Replies (1)
-
@simontatham@hachyderm.io 2024-04-16 11:24
@brnrd I must admit I've always been nervous about switching the recommendation over to any form of DSA. _Mostly_ because of exactly this fragile k business, but not only that. Though Ed25519 is IMO an improvement on integer DSA and NIST ECDSA – it's easier to see its security argument. Plus I half expect any day now the post-quantum Next Big Thing will be standardised for SSH and then we'll all have to switch again. Bumping the default RSA size, though, fair enough – patch welcome!