[Bug 3923] New: [patch] Support of Ed448

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Feb 16 13:39:04 AEDT 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=3923

            Bug ID: 3923
           Summary: [patch] Support of Ed448
           Product: Portable OpenSSH
           Version: 10.2p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: major
          Priority: P5
         Component: Miscellaneous
          Assignee: unassigned-bugs at mindrot.org
          Reporter: mikhail at zeptobars.com

Created attachment 3941
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3941&action=edit
Patch to support Ed448

Ed448 was my favorite for a very long time, and finally I got to spend
some time with it.
This patch adds ed448 as host/client keys, key generation, SSHFP. X448
is NOT included - everybody are likely using PQ KEX by now.
Basic tests are expanded to cover Ed448, including basic Putty interop.

Requires --with-ed448 and openssl, off by default.

Additional testing:
When built without --with-ed448 - all changes in binaries are verified
to be only caused by __LINE__ differences or sshkey_types enum
differences in sshkey.h. So without --with-ed448 impact should be very
close to 0.

As now more software supports Ed448 out of the box - I have also built
bidirectional interop tests against Erlang/OTP and Python+AsyncSSH, but
these are not part of the patch not to expand dependencies and test
runtime.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list