github doesn't support ed25519 keys does it?
Last I checked bitbucket.org didn't
I just tried. Bitbucket was working ok. What issues are you facing?
I'm on a fedora 24 laptop.
Upgrade your SSH keys
31–40 of 159 posts
Re: Upgrade your SSH keys
#32In Userify (ssh key manager that only distributes sudo roles and public keys -- you keep your private keys[1]) we're going to be disallowing DSS keys soon. I like this post - it's good advice overall. Keys are easy to handle and in some ways more secure than certificate management (which relies on extra unnecessary infrastructure). 1. https://userify.com
Off topic, but I want to thank you guys again for your service. You guys make it so freaking easy to manage access to our various servers and VMs- I can't even remember how we used to deal with it.
Re: Upgrade your SSH keys
#33Can someone explain to me why RSA 2048 is "recommended to change"? It's still the default for gpg keys and as far as I know is widely thought to be secure for at least few hundred years!
No, not even close to a few hundred years. No more than ~20 years at this point. https://www.keylength.com/en/4/
Re: Upgrade your SSH keys
#34Earlier quoted context omitted.
Also: with quantum computing still in its infancy, how do we actually know which types of keys would be adequate?
Koblitz and Menezes explore various theories about the NSA's new policy in their paper, A Riddle Wrapped In An Enigma: https://eprint.iacr.org/2015/1018.pdf
For anyone reading the thread, this is an absolute must-read paper if you're at all interested in the near-future of production cryptosystems in high-risk settings.
Re: Upgrade your SSH keys
#35Re: Upgrade your SSH keys
#36RSA 2048 is still the openssh default, i.e., best current advice from the openssh authors. The fact that this article's author labels that as "yellow" is a red flag.
The same arguments were being made in some Reddit threads on the same post; I don't see any reason or new information to point towards RSA 2048 being a questionable or unreasonable choice. If quantum computing becomes more accessible, there will be a quantum shift (forgive the pun) in how we secure our connections.
A shift of a very, very tiny yet discrete amount?
Re: Upgrade your SSH keys
#37I disagree with the author. Before you go upgrading into ed25519, beware that the NSA/NIST is moving away from elliptical curve cryptography because it's very vulnerable to cracking with quantum attacks[0]. "So let me spell this out: despite the fact that quantum computers seem to be a long ways off and reasonable quantum-resistant replacement algorithms are nowhere to be seen, NSA decided to make this announcement p…
"battle tested" and "resistant to quantum computing" are complete opposites
Orthogonal?
Re: Upgrade your SSH keys
#38Security is not my specialty, but I obviously wade in this field, being a developer. Having read this article I will say this to OP and the author:
Thank you, I am sufficiently paranoid enough to change my keys now.
Re: Upgrade your SSH keys
#39In Userify (ssh key manager that only distributes sudo roles and public keys -- you keep your private keys[1]) we're going to be disallowing DSS keys soon. I like this post - it's good advice overall. Keys are easy to handle and in some ways more secure than certificate management (which relies on extra unnecessary infrastructure). 1. https://userify.com
Off topic, but I want to thank you guys again for your service. You guys make it so freaking easy to manage access to our various servers and VMs- I can't even remember how we used to deal with it.
you sound like a great customer! i bet you won't forget to cancel your subscription payments either.
or is this a shill thing? sorry, i'll leave you two at it. say something else.
you're all idiots.
Re: Upgrade your SSH keys
#40Can someone explain to me why RSA 2048 is "recommended to change"? It's still the default for gpg keys and as far as I know is widely thought to be secure for at least few hundred years!
It could have to do with the NSA's August 2015 plan for transitioning to quantum-resistant algorithms. In their new Commercial National Security Algorithm (CNSA) Suite, they advise a minimum 3072-bit RSA modulus: https://www.iad.gov/iad/programs/iad-initiatives/cnsa-suite.... (Doh... I don't know why I'm getting an invalid certificate authority error when trying to access that site, but Qualys SSL Labs confirms it's…
The certificate is issued by the DOD's internal CA. Not sure why they're using one for a public facing site though.