3 ms·
Really looking forward to seeing ssh-rsa (i.e. RSA with SHA-1) behind us! Unfortunately, implementation support for the new RSA with SHA-2 algorithms is still
by hansnielsen 5y ago
Really looking forward to seeing ssh-rsa (i.e. RSA with SHA-1) behind us!
Unfortunately, implementation support for the new RSA with SHA-2 algorithms is still behind in some languages. I've had an open issue for Go's x/crypto/ssh since last February with an accepted proposal and working code, but I've struggled to get a review despite clear interest on the issue.
https://github.com/golang/go/issues/37278 https://github.com/golang/go/issues/37278
https://go-review.googlesource.com/c/crypto/+/220037/ https://go-review.googlesource.com/c/crypto/+/220037/
- papaf 5y agoThanks for your hard work on this bug -- I got bitten by it and I would really like to see the fix released.
- gruez 5y ago>Really looking forward to seeing ssh-rsa (i.e. RSA with SHA-1) behind us! Does it actually increase security? AFAIK the only relevant attack here is a preimage attack, and even md5 is still secure against it.