|
|
|
|
|
by genr8
2212 days ago
|
|
I havent confused them. Its phrased like that to alert people they can't change the key strength by bit-ness, but they can change the KDF password-strength, on GENERATION, which is peoples first gateway into Ed25519. And X448 opens another can of worms, ssh-keygen still does not support that algo. OpenSSL 1.1.1 does, with:
openssl genpkey -algorithm Ed448
but that doesn't relate to this discussion of use for SSH public keys.
The support is very bare bones and only allows C code access meant for use in TLS servers, not SSH command line tools. They recently added EVP_PKEY_get_raw_public_key() relating to Ed25519/Ed448 but that doesnt help in actually running a command to generate these X448 algo Curve keys yourself for use in SSH keys. So if you know how to use X448/Ed448 public/private keypairs with SSH, do tell. |
|