<story><title>OpenSSH 9.5 released with keystroke timing obfuscation</title><url>https://lwn.net/Articles/946497/</url></story><parent_chain></parent_chain><comment><author>Tempest1981</author><text>More from last month:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=37307708&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=37307708&lt;/a&gt; (258 comments)</text></comment>
<story><title>OpenSSH 9.5 released with keystroke timing obfuscation</title><url>https://lwn.net/Articles/946497/</url></story><parent_chain></parent_chain><comment><author>throw0101a</author><text>More importantly (IMHO):&lt;p&gt;&lt;pre&gt;&lt;code&gt;    ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
&lt;/code&gt;&lt;/pre&gt;
* &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.openssh.com&amp;#x2F;releasenotes.html#9.5&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.openssh.com&amp;#x2F;releasenotes.html#9.5&lt;/a&gt;&lt;p&gt;Previously, if you didn&amp;#x27;t specify &amp;quot;-t&amp;quot;, you got RSA keys; now you get Ed25519, and if you want RSA you have to ask for it.&lt;p&gt;NIST&amp;#x27;s publication of FIPS 186-5 in February (2023) added Ed25519 and Ed448 as approved (? allowed?) algorithms:&lt;p&gt;* &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;csrc.nist.gov&amp;#x2F;publications&amp;#x2F;detail&amp;#x2F;fips&amp;#x2F;186&amp;#x2F;5&amp;#x2F;final&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;csrc.nist.gov&amp;#x2F;publications&amp;#x2F;detail&amp;#x2F;fips&amp;#x2F;186&amp;#x2F;5&amp;#x2F;final&lt;/a&gt;&lt;p&gt;* &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;EdDSA#Standardization_and_implementation_inconsistencies&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;EdDSA#Standardization_and_impl...&lt;/a&gt;&lt;p&gt;Partly one of the reasons given for the default switch:&lt;p&gt;* &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;lists.mindrot.org&amp;#x2F;pipermail&amp;#x2F;openssh-unix-dev&amp;#x2F;2023-September&amp;#x2F;040932.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;lists.mindrot.org&amp;#x2F;pipermail&amp;#x2F;openssh-unix-dev&amp;#x2F;2023-Se...&lt;/a&gt;&lt;p&gt;Curious to know if&amp;#x2F;when the OpenSSH folks will add Ed448 (RFC 8709, like Ed25519).</text></comment>