4k RSA dont cut it anymore

This commit is contained in:
Frieder Schlesier 2018-04-02 13:53:13 +02:00
parent a4be98ccab
commit 98c24ba323
1 changed files with 1 additions and 1 deletions

View File

@ -36,7 +36,7 @@ Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.
```bash ```bash
# RSA keys are favored over ECDSA keys when backward compatibility ''is required'', # RSA keys are favored over ECDSA keys when backward compatibility ''is required'',
# thus, newly generated keys are always either ED25519 or RSA (NOT ECDSA or DSA). # thus, newly generated keys are always either ED25519 or RSA (NOT ECDSA or DSA).
$ ssh-keygen -t rsa -b 4096 -f ~/.ssh/id_rsa_host_$(date +%Y-%m-%d) -C "Key to HOST for user-xyz" $ ssh-keygen -t rsa -b 8192 -f ~/.ssh/id_rsa_host_$(date +%Y-%m-%d) -C "Key to HOST for user-xyz"
# ED25519 keys are favored over RSA keys when backward compatibility ''is not required''. # ED25519 keys are favored over RSA keys when backward compatibility ''is not required''.
# This is only compatible with OpenSSH 6.5+ and fixed-size (256 bytes). # This is only compatible with OpenSSH 6.5+ and fixed-size (256 bytes).