3 ms·

Does Azure support ed25519 keys yet?

by dochtman 3y ago

Svenstaro 3y ago
No. :(
er0k 3y ago
I thought this was a joke, but they really don't: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/ed25519-ssh-keys https://learn.microsoft.com/en-us/troubleshoot/azure/virtual... what the fuck? What is Microsoft doing? ed25519 was added to openssh, what, 7 years ago? This boggles my mind.
- Macha 3y ago
  Just about exactly 10 years ago, actually: https://lwn.net/Articles/590870/ https://lwn.net/Articles/590870/
- pbhjpbhj 3y ago
  Maybe they're supporting TLAs abilities to crack Microsoft users when 'necessary'?
- adastra22 3y ago
  It actually violates some federal contracting rules to support non-NIST keys. Maybe they don’t bother for that reason?
  - dharmab 3y ago
    Azure's gov cloud is a separate API.
    - adastra22 3y ago
      With a lot of shared software. Need a strong reason to introduce differences which if accidentally misconfigured could have large contract liabilities.
epistasis 3y ago
Does AWS or GCP? Doing some web searches, it looks like at least parts of GCP do not: https://issuetracker.google.com/issues/195231191 https://issuetracker.google.com/issues/195231191 And some parts of AWS do support the key type: https://aws.amazon.com/about-aws/whats-new/2021/08/amazon-ec2-customers-ed25519-keys-authentication/ https://aws.amazon.com/about-aws/whats-new/2021/08/amazon-ec...