118
votes
Accepted
Why OpenSSH deprecated DSA keys
This is a good question. The dedicated page from OpenSSH only says:
OpenSSH 7.0 and greater similarly disables the ssh-dss (DSA) public key algorithm. It too is weak and we recommend against its use.
...
18
votes
Accepted
What are the differences between the RSA, DSA, and ECDSA keys that SSH uses?
What are these files for?
These are your host keys uniquely identifying your host. When OpenSSH is started for the first time, it will generate these keypairs. When an SSH client connects to your ...
12
votes
Why OpenSSH deprecated DSA keys
https://bugzilla.mindrot.org/show_bug.cgi?id=1647 has the reasoning behind the restricting DSA keys to 1024 bits, but basically:
RFC4253 section 6.6 requires the SHA1 hash (160 bits) for ssh-dss (ie ...
10
votes
Should DSA keys be considered deprecated?
OpenSSH's decision appears to be motivated by some sort of confusion that originates from their own code base; see this answer for an analysis.
In SSH, DSA keys are deprecated because the people who ...
4
votes
Found DSA and RSA private keys hard-coded in a file during penetration testing. How to use them for SSH authentication?
If there are configuration files for ssh server, they are probably server host keys and you are not able to log in with then anywhere. Only to perform Man in The Middle attack, if you would be able to ...
4
votes
Accepted
Can an attacker replace the hash of a download, a download, and the public key?
If the site with the instructions is compromised the attacker can replace all instructions. This means that he can specify a different key to use for verification or omit the verification information ...
3
votes
Generating a DER-encoded DSA public key of a particular file size
There are lots of things in an X.509 certificate other than the publickey whose sizes can be varied to pretty much anything you want, especially if you don't care about security: all the name fields, ...
3
votes
Is it safe if SSH and HTTPS server share the same RSA/DSA keys?
Just let the SSHD create some random keys for you.
If either of the server software or the protocols reveals to be vulnerable in a way that could leak the private key, that would compromise both SSH ...
2
votes
Accepted
Is it possible to have an RSA authentication subkey with a DSA master key?
You need to activate the --expert mode to select arbitrary combinations of algorithms and capabilities (inside given technical limitations, DSA keys will never be able to have signing capability).
$ ...
2
votes
RSA-1024 vs. DSA-1024: Claim DSA SSH key is much faster to brute force
Trying to brute force either a RSA or DSA key would be a losing proposition, there are far too many possibilities and there are far better attacks known.
For properly implemented RSA the best-known ...
2
votes
Why OpenSSH deprecated DSA keys
186-3 (and -4) 4.2 says 'ordinarily should not' use a hash weaker than L,N
That part says
A hash function that provides a lower security strength than the (L, N) pair ordinarily should not be used.
...
2
votes
Accepted
Does SSH support DSA with 2048 bit keys?
For the hash: Crossdupe https://crypto.stackexchange.com/questions/15051/why-does-openssh-use-only-sha1-for-signing-and-verifying-of-digital-signatures and https://crypto.stackexchange.com/questions/...
2
votes
How do I sign a short text message with ~/.ssh/id_{dsa,ecdsa,ed25519}?
For DSA, ECDSA using OpenSSL and using different functions and structures than for RSA.
It won't work for ed25519 keys, because their operations are implemented in the openSSH itself. But you can ...
1
vote
Accepted
How can we ensure non-repudiation without a personal certificate (eg. using ID authentication)
Think you can apply Something You Know, Have, or Are authentication principle, right now many fintech business use many different "2 of 3" combinations on this, like password+phone authenticator, ...
1
vote
Should I stop using DSA key algorithm self-signed certificates in production in favor of RSA Certificates?
RSA is generally considered to be a better idea simply because it is less fragile than DSA. When used properly, they are both equally secure. The problem stems from the fact that DSA signatures, if ...
1
vote
Impact analysis of CVE-2016-1000341 affecting BouncyCastle
TLDR: 1a.
DSA signature generation is generating a signature (for data). As you quoted
... gain information about the signatures [sic - should have an apostrophe] k value and ultimately the ...
1
vote
Website uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Looks like you are missing which SSL protocol and in which order to use, also you must specify on which IP should SSL be listening.
And eventually your virtual host with 443 should look like this:
&...
1
vote
Found DSA and RSA private keys hard-coded in a file during penetration testing. How to use them for SSH authentication?
If they are in fact private keys with the corresponding public keys on the server setup for a user for SSH access, then you should be able to SSH presuming that public key access is enabled.
If you ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
dsa × 39rsa × 17
digital-signature × 9
ssh × 8
tls × 6
encryption × 4
cryptography × 4
gnupg × 4
openssh × 4
certificates × 3
authentication × 2
openssl × 2
pgp × 2
key-generation × 2
sha × 2
diffie-hellman × 2
web-application × 1
hash × 1
privacy × 1
public-key-infrastructure × 1
webserver × 1
aes × 1
key-management × 1
brute-force × 1
java × 1