How often should I rotate my SSH keys?

Re:How often should I rotate my SSH keys? by rhuber on Friday February 26, 2021 @10:19AM (#26275595)

I wasn't commenting on the strength of RSA-1024, per se, but on the assumed age of that key. OpenSSH's ssh-keygen hasn't defaulted to 1024 bit RSA keys since before version 4.2, in 2005. (I had to look it up: https://www.openssh.com/releasenotes.html)

You can still generate a 1024 bit RSA key, but someone would have to go out of their way to do so, and I can't imagine why they would have done that in the past .. decade?

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by foolmeonce on Friday February 26, 2021 @11:36AM (#26276604)

> I can't imagine why they would have done that in the past .. decade?

Maybe they aren't using software keys, but rather a low quality/older/small-kb hardware token or following the default guide for one? The vast majority supported 2048 in 2010 though..

[ Parent | on HN ]