3 ms·
Why wouldn't you put a passphrase on your key?! An agent, and especially keychain support, removes almost all the inconvenience, and it adds a tremendous amoun
by smw 10y ago
Why wouldn't you put a passphrase on your key?! An agent, and especially keychain support, removes almost all the inconvenience, and it adds a tremendous amount of security.
- zaroth 10y agoAlthough this depends very much on the particular form of key you are using. Password encrypted SSH keys were getting a single round of MD5 for the longest time. This was fixed initially only for Ed25519 keys, to use bcrypt(5), which is still not fantastic, but a hell of a lot better than md5(1). Newer OpenSSH (v6.5 and later) has a new file format and allows specifying an arbitrary bcrypt complexity regardless of the key type. Look for your private key file to start with; -----BEGIN OPENSSH PRIVATE KEY----- [1] - https://pthree.org/2014/12/08/super-size-the-strength-of-your-openssh-private-keys/ https://pthree.org/2014/12/08/super-size-the-strength-of-you...