Collaborate Disseminate
I have created an open-ssh keypair using ssh-keygen with the defaults, and encrypted the private key with a passphrase. I already know how to derive the public-key from the private-key using ssh-keygen -y, for which I will need to enter th… Continue reading Is it possible to retrieve the public-key from an encrypted or passphrase-protected ssh private-key?
Latest epsiode. Listen now! Continue reading S3 Ep121: Can you get hacked and then prosecuted for it? [Audio + Text]
It’s a bug fix for a bug fix. A memory leak was turned into a double-free that has now been turned into correct code… Continue reading OpenSSH fixes double-free memory bug that’s pokable over the network
In a recent ssh -vv output, I saw OpenSSH mentioning a private key file id_xmss.
XMSS is defined in RFC 8391, "XMSS: eXtended Merkle Signature Scheme", May 2018.
OpenSSH has experimental support for XMSS since version 7.7 (2018-0… Continue reading SSH XMSS keypair generation and best practices
In a recent ssh -vv output, I saw OpenSSH mentioning a private key file id_xmss.
XMSS is defined in RFC 8391, "XMSS: eXtended Merkle Signature Scheme", May 2018.
OpenSSH has experimental support for XMSS since version 7.7 (2018-0… Continue reading SSH XMSS keypair generation and best practices
Before posting this question about ed25519, I learned that there are two formats for storing a private ed25519 key,
PKCS#8
OpenSSH Format
Why did OpenSSH create its own format rather than use PKCS#8? Please include any relevant citations… Continue reading Why did OpenSSH create its own key format, and not use PKCS#8?
I’m having a problem where when I export a key from 1password, and use it with ssh -i, I get
Load key "/home/user/.ssh/private_ed25519": invalid format
Doing a google search on this, it seems to be a problem where 1password stor… Continue reading How can I convert an ED25519 key in PKCS#8 to OpenSSH private key format?
I have a custom SSH server (just wrapper code for https://pkg.go.dev/golang.org/x/crypto/ssh) and I want to show banner if and only if user cannot authorize. I’ve tried to modify serverAuthenticate method, but without success. The main iss… Continue reading Show user banner if it cannot authenticate over SSH [closed]
I was wondering if it’s possible to only store and read a ssh private key on a yubikey and not read the private key the yubikey generated from a client computer?
Currently the only way it seems to work is that I store the private key on cl… Continue reading Reading SSH private key physically stored on yubikey to remote into external PC
I have a MacBook M1 on which I have been using a Yubikey 5 to authenticate SSH logins to various systems. I recently got a Yubikey 5C so I wouldn’t have to use adapters. I moved my keys over to it using the backup I created when I set up m… Continue reading SSH authentication with GPG failing with a new Yubikey with the same gpg keys as the old one