Skip to main content

New answers tagged

0 votes

Auto-unlock private key: which implications?

would be my passphrase saved somewhere on disk, or only in memory ? The ssh-agent only holds your unencrypted private key in memory while you’re logged in. Obviously the passphrase is used to unlock ...
security_paranoid's user avatar
-1 votes

How resiliant is a private key passphase to brute force attacks?

We all know about estimation of risks, entropy, etc. But let's look at this documentation from another perspective. Read the entire paragraph: An SSH key passphrase is a secondary form of security ...
mentallurg's user avatar
  • 12.5k
6 votes

How resiliant is a private key passphase to brute force attacks?

Here is a benchmark of hashcat on a NVidia RTX 4090. It lists these speeds for OpenSSH private keys: Hash-Mode 22911: 4382.6 MH/s (61.07ms) @ Accel:128 Loops:512 Thr:32 Vec:1 Hash-Mode 22921: 15080....
Sjoerd's user avatar
  • 32.9k
3 votes

How resiliant is a private key passphase to brute force attacks?

A good password/passphrase is practically impossible to crack. Passwords on SSH keys are hashed using an iterative hash. The -a option to ssh-keygen can be used to increase the number of iterations. ...
Sjoerd's user avatar
  • 32.9k
0 votes

Beginner in VPN, how to pick a safe one?

Look for services that operate transparently, offer flexible and/or modern technology for connectivity as well as privacy friendly payment methods. It’s a lot of boring, simple research To assess ...
mzpq's user avatar
  • 170

Top 50 recent answers are included