Skip to main content
added 74 characters in body
Source Link
mti2935
  • 24.1k
  • 2
  • 53
  • 75

Your first example shows a configuration where password authentication is disabled, and key-based authentication is enabled. The second example is the opposite of the first.

With regard to 'N': The keys used in key-based authentication would typically have at least 128 bits of entropy. To have an equivalent amount of entropy using a password (and thus, to have an equal amount of resistance to a brute-force attack), the password would need to be randomly generated, and its length (N) would need to be at least 20 characters (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.

Your first example shows a configuration where password authentication is disabled, and key-based authentication is enabled. The second example is the opposite of the first.

With regard to 'N': The keys used in key-based authentication would typically have at least 128 bits of entropy. To have an equivalent amount of entropy using a password, the password would need to be randomly generated, and its length (N) would need to be at least 20 characters (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.

Your first example shows a configuration where password authentication is disabled, and key-based authentication is enabled. The second example is the opposite of the first.

With regard to 'N': The keys used in key-based authentication would typically have at least 128 bits of entropy. To have an equivalent amount of entropy using a password (and thus, to have an equal amount of resistance to a brute-force attack), the password would need to be randomly generated, and its length (N) would need to be at least 20 characters (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.

added 229 characters in body
Source Link
mti2935
  • 24.1k
  • 2
  • 53
  • 75

TheYour first example shows a configuration where password authentication is disabled, and key-based authentication is enabled. The second example is the opposite of the first.

With regard to 'N': The keys used in key-based authentication willwould typically have at least 128 bits of entropy. To have an equivalent amount of entropy using a password, the password would need to be randomly generated, and its length (N) would need to be at least 20 characters in length (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.

The keys used in key-based authentication will have at least 128 bits of entropy. To have an equivalent amount of entropy using a password, the password would need to be randomly generated, and be at least 20 characters in length (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.

Your first example shows a configuration where password authentication is disabled, and key-based authentication is enabled. The second example is the opposite of the first.

With regard to 'N': The keys used in key-based authentication would typically have at least 128 bits of entropy. To have an equivalent amount of entropy using a password, the password would need to be randomly generated, and its length (N) would need to be at least 20 characters (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.

Source Link
mti2935
  • 24.1k
  • 2
  • 53
  • 75

The keys used in key-based authentication will have at least 128 bits of entropy. To have an equivalent amount of entropy using a password, the password would need to be randomly generated, and be at least 20 characters in length (possibly more depending on the character set used). See How many bits of entropy should a password have to be reasonably future proof (10+ years)? for more info.