All Questions
8 questions
1
vote
3
answers
418
views
Is it safe if SSH and HTTPS server share the same RSA/DSA keys?
I'm configuring an ssh server for an embedded device. This device already has an x.509 certificate and a pair of public key and private keys stored in it that is used for its HTTPS server. Is it safe ...
15
votes
1
answer
26k
views
What are the differences between the RSA, DSA, and ECDSA keys that SSH uses?
In my /etc/ssh/ directory, I can see three keys which contains three different types of ssh keys:
-rw------- 1 root root 607 Oct 4 22:43 ssh_host_dsa_key
-rw-r--r-- 1 root root 623 Oct 4 22:43 ...
5
votes
1
answer
3k
views
Does SSH support DSA with 2048 bit keys?
In FIPS 186-1 and 186-2 L could be any number between 512 and 1024 (inclusive) that was a multiple of 64. N was fixed at 160.
FIPS 186-3 changed it so that L and N could be any combination of the ...
1
vote
1
answer
658
views
How do I sign a short text message with ~/.ssh/id_{dsa,ecdsa,ed25519}?
There are already a number of questions about reusing SSH keys for something else:
Converting keys between openssl and openssh
How to use public key in ~/.ssh for asymmetrical encryption with OpenSSL
...
3
votes
3
answers
3k
views
Found DSA and RSA private keys hard-coded in a file during penetration testing. How to use them for SSH authentication?
We are performing a penetration test as part of a study where the hardware unit listens for connection over FTP, SSH, and Telnet. All of these are password-protected. The hardware unit must first be ...
95
votes
3
answers
71k
views
Why OpenSSH deprecated DSA keys
There was a question RSA vs. DSA for SSH authentication keys asking which key is better. Basically all answers were more in a favour of RSA over DSA but didn't really tell that DSA would be somehow ...
23
votes
2
answers
56k
views
Why are DSA keys referred to as DSS keys when used with SSH?
When I generate a DSA key with ssh-keygen -t dsa, the resulting public key will begin with ssh-dss.
How come? Why not ssh-dsa?
2
votes
1
answer
468
views
Is the `ssh-agent`'s DSA signature deterministic?
In my hopes to use ssh-agent to generate a signature as password I implicitly assumed a deterministic signature. DSA is however supposed to take random value k for signing. However that randomness is ...