> State-of-the-art crypto: ssh-ed25519, curve25519-sha256, chacha20-poly1305@openssh.com > Older standard: ecdsa-sha2-nistp256, ecdh-sha2-nistp256, aes256-ctr,

> State-of-the-art crypto: ssh-ed25519, curve25519-sha256, chacha20-poly1305@openssh.com > Older standard: ecdsa-sha2-nistp256, ecdh-sha2-nistp256, aes256-ctr, hmac-sha2-256 removed in version 20190101 Bah! I've soured on ed25519 because two of the tools I depend on have lackluster support. We have one tool that leverages Macbook TouchID as a hardware keystore, and it doesn't support ed25519, only ecdsa (I don't know whether this is a TouchID or a tool limitation, I suspect tool). The other is that recent versions of Gerrit, which leverages Apache SSH, will crash the SSH connection when presented with some ed25519 certificates, which is funny since Gerrit does not support certificates! I really wish ed25519 was more widely and better supported, or that TinySSH supported ECDSA.