Collaborate Disseminate
There was a question RSA vs. DSA for SSH authentication keys asking which key is better. Basically all answers were more in a favour of RSA over DSA but didn’t really tell that DSA would be somehow insecure.
Now however DSA … Continue reading Why OpenSSH deprecated DSA keys
There was a question RSA vs. DSA for SSH authentication keys asking which key is better. Basically all answers were more in a favour of RSA over DSA but didn’t really tell that DSA would be somehow insecure.
Now however DSA … Continue reading Why OpenSSH deprecated DSA keys
When creating Diffie Hellman parameters for OpenSSH, there’s a two-step process which looks like this to generate and filter secure primes for Diffie Hellman key exchange:
ssh-keygen -b 4096 -G dh4096-insecure
ssh-keygen -f … Continue reading Filtering safe primes for Diffie Hellman on OpenVPN
I have to generate a key, RSA v2 in OpenSSH format. I am a bit confused.
I am trying to generate it using Putty key generator. There I see an option SSH2-RSA and SSH1-RSA. So is SSH2-RSA the RSA2 key or it means something el… Continue reading Generate RSA2 key in OpenSSH format in windows
My company does a lot of automated file transfers over SSH/sftp with banks, etc. A recent SSH upgrade on a server dropped support for the old/weak diffie-hellman-group1-sha1 key exchange protocol in response to the recent Logjam attack.
M… Continue reading Does changing /etc/ssh/moduli impact previously generated keys?
I just realized that I need SSH agent forwarding in order to push to one Git server that then forwards the commits to Github.com. I never used SSH agent forwarding and don’t understand the security implications of enabling this feature. Do… Continue reading Are there any risks associated with SSH agent forwarding?
Consequences of tampered /etc/ssh/moduli describes a possible risk if the moduli file for an OpenSSH server has been tampered with.
Taking the logic a step further, is there any concern with the default file shipped with OpenSSH? I ask be… Continue reading Is it considered worth it to replace OpenSSH’s moduli file?