Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with openssh
Search options answers only
not deleted
user 242928
A free and open implementation of the SSH communication security tools.
6
votes
Accepted
ssh-keygen fingerprint format is different between RSA+ECDSA and ED25519
ssh-keygen -l shows you more than just the fingerprint. The fingerprint is the second piece starting with SHA256:. It also shows you the key size in bits, which is the first part; the comment, which …
- 9,712
2
votes
Accepted
OpenSSH Primes - can there be such a thing as "too few" primes available?
As a practical matter, assuming the primes are of sufficient size, a single set of parameters per size is sufficient. That's because a single set of parameters can be used multiple times, and in fact …
- 9,712
14
votes
Accepted
Why are rsa-sha2-512 and rsa-sha2-256 supported but not reported by ssh -Q key?
To determine signature types, you need ssh -Q sig, which, on my system with OpenSSH 8.4, prints the following:
ssh-ed25519
[email protected]
ssh-rsa
rsa-sha2-256
rsa-sha2-512
ssh-dss
ecdsa-sha2 …
- 9,712
4
votes
Accepted
ssh -Q key not listing all key types?
The [email protected] type indicates an OpenSSH certificate. … This is useful if you have a controlled environment, like a company, and you want to create a certificate authority to sign OpenSSH keys and restrict access to only those keys. …
- 9,712
2
votes
SSH to github.com only adds RSA keys - excludes ed25519 host keys
That's why OpenSSH turned off the CheckHostIP setting in 8.5 and newer. You can see what choices OpenSSH has made based on running ssh -vvv [email protected]. … Note that this decision is made by OpenSSH on the client side; the server always offers the keys, but the client decides whether to update them. …
- 9,712
3
votes
Why are FIDO2 protected SSH keys affected by phishing attacks?
These are different contexts.
When you're using a FIDO2 token as part of a WebAuthn request, your browser, a trusted party, sends the actual website you're visiting, in addition to the data you're rec …
- 9,712
7
votes
Accepted
How does the weakness of SHA-1 introduce attack vectors in SSH?
the OpenSSH developers are most worried about as well. … So if you're not using OpenSSH certificates, you're probably not at a direct risk from attack. …
- 9,712
4
votes
Accepted
How does ed25519-sk actually works?
The documentation for the U2F-based formats are documented in the OpenSSH distribution in the file PROTOCOL.u2f. This outlines the formats, the design decisions, and all of the protocol messages. …
- 9,712