3 ms·
No, it's genuinely 160 bit keys. The SSHv2 protocol mandates FIPS-186-2, which only allows 160 bit keys. 224-bit and 256-bit keys were only introduced in the la
by crote 3y ago
No, it's genuinely 160 bit keys. The SSHv2 protocol mandates FIPS-186-2, which only allows 160 bit keys. 224-bit and 256-bit keys were only introduced in the later FIPS-186-3.
- lxgr 3y agoAh, I mistook "private" for "public" key. The private key is indeed 160 bit for DSA per FIPS-186-3; it's the public key that's 1024 bit. That's commonly used as the "security parameter" for DSA, though; 160 is very easy to confuse with e.g. a symmetric encryption key or hash length.