<story><title>OpenSSH Keys: A Walkthrough</title><url>https://kyleisom.net/articles/ssh_keys.html</url></story><parent_chain><item><author>mkup</author><text>&lt;i&gt;When most people think of SSH keys, they probably think of RSA if they’re aware of the underlying cryptography. Until recently, they would be right: RSA has been a mainstay of public key cryptography for some time now, and although it’s on the way out for new protocols and systems, it will be around for quite some time.&lt;/i&gt;&lt;p&gt;Why is RSA on the way out? This is news for me. Are there any (potential) weaknesses that have been discovered recently in the RSA? I know that elliptic curve cryptography has shorter (and hence somewhat more convenient) keys, but that fact alone hardly makes RSA obsolete. Are there anything else?</text></item></parent_chain><comment><author>benchaney</author><text>RSA is still secure with a few caveats.&lt;p&gt;1. It isn&amp;#x27;t secure against quantum computing attacks. Granted neither are elliptical curve based cryptosystems, so this isn&amp;#x27;t the motivation for switching.&lt;p&gt;2. It requires complicated padding schemes to prevent certain classes of attacks. The padding schemes do succeed at solving this problem, but they add a layer of complexity, and are often done incorrectly by inexperienced crypto users.&lt;p&gt;3. It is speculated that there are additional attacks based on math that hasn&amp;#x27;t yet been discovered. There is some speculation that the NSA has&amp;#x2F;is&amp;#x2F;will break RSA using these types of attacks.&lt;p&gt;4. There are a huge number of potential side channel attacks based on weirdness with how RSA key&amp;#x27;s affect the computation performed during encryption&amp;#x2F;decryption. Like with #2, there are ways around it, but it can still cause problems.&lt;p&gt;That said, if you use reasonable sized keys (2048 bit or larger), use libraries implemented by professionals with the correct options enabled, and you are worried about garden variety attacks, not the NSA, you are probably fine with RSA. Some people are starting to think that they are a little to much to bear, particularly when elliptic curves solve a lot of the problems and have smaller key sizes and faster computation.&lt;p&gt;Side note: But for a few exceptions, any processor on the market today (including mobile&amp;#x2F;embedded) could easily establish an SSH session using RSA without it being a significant cost. RSA (and Elliptic curve cryptography) is only used at the beginning of the session to establish a symmetric session key.</text></comment>
<story><title>OpenSSH Keys: A Walkthrough</title><url>https://kyleisom.net/articles/ssh_keys.html</url></story><parent_chain><item><author>mkup</author><text>&lt;i&gt;When most people think of SSH keys, they probably think of RSA if they’re aware of the underlying cryptography. Until recently, they would be right: RSA has been a mainstay of public key cryptography for some time now, and although it’s on the way out for new protocols and systems, it will be around for quite some time.&lt;/i&gt;&lt;p&gt;Why is RSA on the way out? This is news for me. Are there any (potential) weaknesses that have been discovered recently in the RSA? I know that elliptic curve cryptography has shorter (and hence somewhat more convenient) keys, but that fact alone hardly makes RSA obsolete. Are there anything else?</text></item></parent_chain><comment><author>jvehent</author><text>RSA is safe. You should keep using it. Modern crypto is starting to use ECDSA because smaller key size means faster computation, but you wouldn&amp;#x27;t notice the difference in SSH anyway.&lt;p&gt;More info: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;wiki.mozilla.org&amp;#x2F;Security&amp;#x2F;Guidelines&amp;#x2F;OpenSSH&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;wiki.mozilla.org&amp;#x2F;Security&amp;#x2F;Guidelines&amp;#x2F;OpenSSH&lt;/a&gt;</text></comment>