4 ms·

For the longest time, to the best of my knowledge, instructions provided by GitHub and GitLab, probably the two most popular software with easy to access instru

For the longest time, to the best of my knowledge, instructions provided by GitHub and GitLab, probably the two most popular software with easy to access instructions on generating a SSH keys defaulted to displaying the RSA key generation instructions first instead of an Ed25519 key. The good news is that GitLab uses Ed25519 keys as the recommended default [0]. GitHub still recommends RSA keys by default [1]. [0]: https://docs.gitlab.com/ee/ssh/README.html#generating-a-new-ssh-key-pair https://docs.gitlab.com/ee/ssh/README.html#generating-a-new-... [1]: https://help.github.com/en/github/authenticating-to-github/generating-a-new-ssh-key-and-adding-it-to-the-ssh-agent#generating-a-new-ssh-key https://help.github.com/en/github/authenticating-to-github/g...

SomaticPirate 6y ago
I’m still not sure why I should use Ed25519? Is it just cryptographically “tougher”?
- Enginerrrd 6y ago
  As I understand it, it's computationally faster and the same key size confers much more security than RSA. That said, there are some elliptic curve skeptics out there that think the NSA has cooked certain curves or may have techniques we don't know about and that's why they've been pushing it so hard. The latter being less likely than the former. Don't use the NIST curves.
- numpad0 6y ago
  RSA getting weaker ECDSA suspected backdoored by NSA EdDSA/Ed25519 like ECDSA but community made RSA32768 might be okay but weird
  - cryptonector 6y ago
    ECDSA isn't thought to be backdoored so much as designed on purpose to be very difficult to get right / very easy to get catastrophically wrong.
mercer 6y ago
My first encounter with ED25519 was via Gitlab. Didn't have a clue there was something 'else' to do and it's good to be able to read the discussion here. Can I assume RSA is still 'good enough' though and something to just 'phase out' as my servers come and go?

SomaticPirate 6y ago

I’m still not sure why I should use Ed25519? Is it just cryptographically “tougher”?

Enginerrrd 6y ago
As I understand it, it's computationally faster and the same key size confers much more security than RSA. That said, there are some elliptic curve skeptics out there that think the NSA has cooked certain curves or may have techniques we don't know about and that's why they've been pushing it so hard. The latter being less likely than the former. Don't use the NIST curves.
numpad0 6y ago
RSA getting weaker ECDSA suspected backdoored by NSA EdDSA/Ed25519 like ECDSA but community made RSA32768 might be okay but weird
- cryptonector 6y ago
  ECDSA isn't thought to be backdoored so much as designed on purpose to be very difficult to get right / very easy to get catastrophically wrong.

mercer 6y ago

My first encounter with ED25519 was via Gitlab. Didn't have a clue there was something 'else' to do and it's good to be able to read the discussion here. Can I assume RSA is still 'good enough' though and something to just 'phase out' as my servers come and go?