RSA key configuration limitations

Brian Candler b.candler at pobox.com
Tue Jun 14 01:35:16 AEST 2022


On 13/06/2022 09:29, Jochen Bern wrote:
> I realize that with the *current* selection of algorithms available in 
> OpenSSH, fine-grained control of minimum key size almost(!) is an 
> RSA-only topic, but nonetheless I wonder whether newly-defined config 
> syntax thereto should be aimed at extensibility to other 
> cryptalgorithms ...

Or in retrospect, would it have been better to define the RSA algorithms 
with key size baked in?

rsa1024-sha2-256
rsa1536-sha2-256
rsa2048-sha2-256

etc



More information about the openssh-unix-dev mailing list