3 ms·

There's really nothing wrong with RSA keys. This issue is about the combination of RSA with SHA1 hashes for signatures. Using RSA with sha2-hashes is fine. (Ye

by hannob 6y ago

There's really nothing wrong with RSA keys. This issue is about the combination of RSA with SHA1 hashes for signatures. Using RSA with sha2-hashes is fine. (Yes, I know some people generally want to see RSA go away, but almost all more general issues with RSA have to do with encryption and not signatures, so SSH is pretty much unaffected.)

lxgr 6y ago
> This issue is about the combination of RSA with SHA1 hashes for signatures. Is second preimage resistance actually relevant in the context of SSH authentication?
- gruez 6y ago
  It's used by the client to authenticate the server, since openssh shows you the key fingerprint (hash) upon connecting, not the raw key.
  - lxgr 6y ago
    My client displays SHA256 fingerprints even for RSA servers. `.known_hosts` seems to store the full key anyway, not just a fingerprint.