3 ms·
Although this depends very much on the particular form of key you are using. Password encrypted SSH keys were getting a single round of MD5 for the longest tim
by zaroth 10y ago
Although this depends very much on the particular form of key you are using.
Password encrypted SSH keys were getting a single round of MD5 for the longest time. This was fixed initially only for Ed25519 keys, to use bcrypt(5), which is still not fantastic, but a hell of a lot better than md5(1).
Newer OpenSSH (v6.5 and later) has a new file format and allows specifying an arbitrary bcrypt complexity regardless of the key type. Look for your private key file to start with;
-----BEGIN OPENSSH PRIVATE KEY-----
[1] - https://pthree.org/2014/12/08/super-size-the-strength-of-your-openssh-private-keys/ https://pthree.org/2014/12/08/super-size-the-strength-of-you...