1. 17
    How to design an elliptic-curve signature system security blog.cr.yp.to
    inactive-user avatar via inactive-user 7 years ago | cached | 5 comments

  1.  

  2. 4
    trousers avatar trousers 7 years ago | link

    Apparently openssh 6.5+ supports Ed25519 for keys now. Based my reading of this article, that sounds like a good thing.

    1. 1
      inactive-user avatar inactive-user 7 years ago | link

      Meawhile, OS X won’t even let me use ECDSA keys on OS X 10.9.2.

      1. 2
        trousers avatar trousers edited 7 years ago | link

        It is particularly frustrating because the man page on 10.9.2 claims that it is supported! Some weird man page build issue or something.

        You can install openssh from homebrew tap, to get a newer version. For a while it was completely busted (version change broke patch required to work with osx keychain). I haven’t tried it since the tap was updated yet though.

        I wouldn’t mind a newer version in FreeBSD 10 base either. :/

        1. 1
          tedu avatar tedu 7 years ago | link

          Did they change the defaults? Do you need to edit sshd_config?

      2. 1
        tedu avatar tedu 7 years ago | link

        Note that ECDSA host keys are still the preferred default.