Timeline for ssh server encrypted key vs password login
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 9, 2022 at 20:37 | comment | added | hft | It's literally linked directly in your now-closed question. | |
| Mar 9, 2022 at 19:40 | comment | added | stefd | I haven't found a question like this | |
| Mar 8, 2022 at 16:42 | comment | added | hft | OP, your question is "is it safe"? This is different from asking about equivalent entropy. There are many differences between passwords and ssh keys, not just number of bits. In password-based authentication you always have to send the password to the server. This is less safe than ssh-key-based authentication regardless of the password length. In ssh-key-based authentication, you don't ever send the actual secret to the server, which is one reason why it is better than a password regardless of password length. This question is already answered elsewhere on this site. | |
| Mar 8, 2022 at 14:55 | comment | added | stefd | ok, I will wait for some other answers to have a comparison before accepting this one | |
| Mar 8, 2022 at 14:39 | comment | added | mti2935 | To be equally resistant to a brute-force attack, yes. I edited my answer to clarify this. | |
| Mar 8, 2022 at 14:39 | history | edited | mti2935 | CC BY-SA 4.0 |
added 74 characters in body
|
| Mar 8, 2022 at 14:31 | comment | added | stefd | so it should have the same amount of bits as the private key without passprhase? | |
| Mar 3, 2022 at 19:45 | history | edited | mti2935 | CC BY-SA 4.0 |
added 229 characters in body
|
| Mar 3, 2022 at 19:10 | history | answered | mti2935 | CC BY-SA 4.0 |