Hacker News new | ask | show | jobs
by pmoriarty 2088 days ago
Speaking of human-readable, I really like ssh's "randomart" visualizations of ssh fingerprints.[1][2][3]

They're much easier for humans to differentiate than the usual long string of hex characters (even 26 characters is too long to reliably compare when a single mismatched character might make all the difference).

Examples of randomart:

  Generating public/private rsa key pair.
  The key fingerprint is:
  05:1e:1e:c1:ac:b9:d1:1c:6a:60:ce:0f:77:6c:78:47 you@i
  The key's randomart image is:
  +--[ RSA 2048]----+
  |       o=.       |
  |    o  o++E      |
  |   + . Ooo.      |
  |    + O B..      |
  |     = *S.       |
  |      o          |
  |                 |
  |                 |
  |                 |
  +-----------------+
  
  Generating public/private dsa key pair.
  The key fingerprint is:
  b6:dd:b7:1f:bc:25:31:d3:12:f4:92:1c:0b:93:5f:4b you@i
  The key's randomart image is:
  +--[ DSA 1024]----+
  |            o.o  |
  |            .= E.|
  |             .B.o|
  |              .= |
  |        S     = .|
  |       . o .  .= |
  |        . . . oo.|
  |             . o+|
  |              .o.|
  +-----------------+
[1] - http://www.dirk-loss.de/sshvis/drunken_bishop.pdf

[2] - https://www.man7.org/linux/man-pages/man1/ssh.1.html

[3] - https://superuser.com/questions/22535/what-is-randomart-prod...

1 comments

I love randomart. To see the randomart of the host you're connecting to, append this to the ssh command:

  ssh user@host -o VisualHostKey=yes
To see the randomart of your own key, or your known hosts:

  ssh-keygen -lv -f ~/.ssh/mykey
  ssh-keygen -lv -f ~/.ssh/known_hosts
> To see the randomart of the host you're connecting to

put it in a ~/.ssh/config or /etc/ssh/ssh_config

why type this stuff over and over?