6 ms·
Looks like this changed for series 5 keys. In August 2019: "the YubiKey now also supports ... Curve25519, the default curve used in ssh (EdDSA and Diffie-Hellm
by jeremyw 7y ago
Looks like this changed for series 5 keys.
In August 2019: "the YubiKey now also supports ... Curve25519, the default curve used in ssh (EdDSA and Diffie-Hellman)", "Addition of Ed25519 signature support, a modern ECC curve".
See https://www.yubico.com/blog/whats-new-in-yubikey-firmware-5-2-3/ https://www.yubico.com/blog/whats-new-in-yubikey-firmware-5-...
- beagle3 7y agoAwesome! Thanks, I missed that update!
- traceroute66 7y agoHave the OpenSSH devs finally relented and allowed support for PKCS#11 with ECC then ? ;-) Last I saw there were patches put forward to the devs since 2015 and they consistently refused to look at them, let alone merge them.
- vetrom 7y agoWhen last I checked, at least on linux/ubuntu the blocking issue was in opensc-pkcs11, not ssh.