SHA256 + base64 fingerprint format

Damien Miller djm at mindrot.org
Tue Nov 15 12:32:20 AEDT 2016


On Mon, 14 Nov 2016, Ryuzo Yamamoto wrote:

> Hi,
> I'm now adding fingerprint format method to golang crypt library.
> Here is the change set for it:
> https://go-review.googlesource.com/#/c/32814/
> 
> I'd like to make sure why the trailing "=" is removed from the result of
> base64.
> Does anybody know?

I trimmed them because they add no information to the fingerprint - they
are always present in the plain b64 encoding given the mismatch between
SHA256's output size and base64's "block" size but they don't represent
any bits of the hash.

Also they're ugly :)

-d


More information about the openssh-unix-dev mailing list