News for hackers. Stuff that matters.

A comment on The surprising persistence of RSA keys in SSH.

Re:The surprising persistence of RSA keys in SSH by enzanki_ars on Friday May 29, 2020 @03:40PM (#23354579)
For the longest time, to the best of my knowledge, instructions provided by GitHub and GitLab, probably the two most popular software with easy to access instructions on generating a SSH keys defaulted to displaying the RSA key generation instructions first instead of an Ed25519 key.

The good news is that GitLab uses Ed25519 keys as the recommended default [0]. GitHub still recommends RSA keys by default [1].

[0]: https://docs.gitlab.com/ee/ssh/README.html#generating-a-new-...

[1]: https://help.github.com/en/github/authenticating-to-github/g...

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by SomaticPirate on Friday May 29, 2020 @10:47PM (#23358040)
I’m still not sure why I should use Ed25519? Is it just cryptographically “tougher”?
[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by Enginerrrd on Saturday May 30, 2020 @01:50AM (#23358817)
As I understand it, it's computationally faster and the same key size confers much more security than RSA. That said, there are some elliptic curve skeptics out there that think the NSA has cooked certain curves or may have techniques we don't know about and that's why they've been pushing it so hard. The latter being less likely than the former. Don't use the NIST curves.
[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by numpad0 on Saturday May 30, 2020 @02:54AM (#23359105)
RSA getting weaker

ECDSA suspected backdoored by NSA

EdDSA/Ed25519 like ECDSA but community made

RSA32768 might be okay but weird

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by cryptonector on Sunday May 31, 2020 @05:16PM (#23372805)
ECDSA isn't thought to be backdoored so much as designed on purpose to be very difficult to get right / very easy to get catastrophically wrong.
[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by mercer on Saturday May 30, 2020 @02:20AM (#23358962)
My first encounter with ED25519 was via Gitlab. Didn't have a clue there was something 'else' to do and it's good to be able to read the discussion here.

Can I assume RSA is still 'good enough' though and something to just 'phase out' as my servers come and go?

[ Parent | on HN ]