Post #1544726
2024-04-16 11:24 UTC
@brnrd I must admit I've always been nervous about switching the recommendation over to any form of DSA. _Mostly_ because of exactly this fragile k business, but not only that. Though Ed25519 is IMO an improvement on integer DSA and NIST ECDSA – it's easier to see its security argument.
Plus I half expect any day now the post-quantum Next Big Thing will be standardised for SSH and then we'll all have to switch again.
Bumping the default RSA size, though, fair enough – patch welcome!
Replies (1)
-
@brnrd@bsd.network 2024-04-16 16:55
@simontatham seems like RedHat is really hanging on to an OpenSSH version that still defaults to RSA. OpenSSH's default has been Ed25519 for years now, yet is lacking Ed448 support. Was pleasantly surprised to see Ed448 in PuTTYgen! Let me see if I can cook up a patch for PuTTYgen's default! Nice challenge. Thanks for creating and maintaining PuTTY all those years. It's been an essential tool for me since the previous century. If it weren't for WSL, I'd surely still be rocking PuTTY!