4k RSA dont cut it anymore
This commit is contained in:
parent
a4be98ccab
commit
98c24ba323
|
@ -36,7 +36,7 @@ Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.
|
||||||
```bash
|
```bash
|
||||||
# RSA keys are favored over ECDSA keys when backward compatibility ''is required'',
|
# RSA keys are favored over ECDSA keys when backward compatibility ''is required'',
|
||||||
# thus, newly generated keys are always either ED25519 or RSA (NOT ECDSA or DSA).
|
# thus, newly generated keys are always either ED25519 or RSA (NOT ECDSA or DSA).
|
||||||
$ ssh-keygen -t rsa -b 4096 -f ~/.ssh/id_rsa_host_$(date +%Y-%m-%d) -C "Key to HOST for user-xyz"
|
$ ssh-keygen -t rsa -b 8192 -f ~/.ssh/id_rsa_host_$(date +%Y-%m-%d) -C "Key to HOST for user-xyz"
|
||||||
|
|
||||||
# ED25519 keys are favored over RSA keys when backward compatibility ''is not required''.
|
# ED25519 keys are favored over RSA keys when backward compatibility ''is not required''.
|
||||||
# This is only compatible with OpenSSH 6.5+ and fixed-size (256 bytes).
|
# This is only compatible with OpenSSH 6.5+ and fixed-size (256 bytes).
|
||||||
|
|
Loading…
Reference in New Issue