The concerns about the nist curves and the dual ec issue are two completely separate things. Furthermore: > Also, the original RSA keys used in SSH have a sha

The concerns about the nist curves and the dual ec issue are two completely separate things. Furthermore: > Also, the original RSA keys used in SSH have a sha-1 problem, and have been deprecated. This is wrong. What's correct is that openssh plans to deprecate sha1 signatures, but you can still use your RSA keys with sha2-based signatures.