News for hackers. Stuff that matters.

A comment on The surprising persistence of RSA keys in SSH. Parent comment

Re:The surprising persistence of RSA keys in SSH by p_l on Friday May 29, 2020 @07:41PM (#23356931)
As far as I understand, none of the hw token vendors support ed25519, because none of the secure element vendors do.

Your best bet is AFAIK ECDSA with NIST parameters.

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by cjcampbell on Friday May 29, 2020 @07:46PM (#23356968)
Yubikey is supporting ed25519 as of firmware 5.2.3 (https://www.yubico.com/blog/whats-new-in-yubikey-firmware-5-...)
[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by p_l on Friday May 29, 2020 @08:44PM (#23357384)
Now THAT is a good news piece :)

I just happened to be considering new yubikeys, maybe I will finally migrate everything. Though I could support ed25519 with my previous idea on handling it (where yubikeys serve as decryption device for elsewhere stored crypto machine.

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by captn3m0 on Friday May 29, 2020 @07:51PM (#23357013)
I’ll try to upgrade, thanks
[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by dmm on Friday May 29, 2020 @08:19PM (#23357199)
You can't upgrade the Yubikeys. You have to buy a new one.

https://support.yubico.com/support/solutions/articles/150000...

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by Avamander on Saturday May 30, 2020 @08:49AM (#23360796)
"When we do release new firmware, we ensure the new YubiKey will function the same as older versions, so there is no need to purchase new YubiKeys to ensure compatibility."

Seems false, doesn't it?

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by sterlind on Friday May 29, 2020 @10:00PM (#23357808)
Ugh that's really frustrating. If it's for security, why can't they just blank the key like they do when the master key is used?
[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by cjcampbell on Saturday May 30, 2020 @02:41AM (#23359035)
Ahh, I should have made that more clear in my comment. Definitely frustrating, as those dang keys aren’t cheap!
[ Parent | on HN ]