3 ms·
Missing from your timeline: 2006-05-01 NIST SP 800-57 Part 1 Rev. 1 is published, which recommends to stop using 1024-bit DSA by 2010. 2010 passes, but O
by ynik 3y ago
Missing from your timeline:
2006-05-01 NIST SP 800-57 Part 1 Rev. 1 is published, which recommends to stop using 1024-bit DSA by 2010.
2010 passes, but OpenSSH never added support for DSA with keylengths larger than 1024-bit.
2015-08-11 OpenSSH 7 disables DSA at runtime.
The new announcement is just removing the config option to re-enable the algorithm. Hopefully most people stuck on DSA already starting migrating in 2015 (ideally: finished migration before 2010).