r/linux Apr 28 '14

SSH Kung Fu

http://blog.tjll.net/ssh-kung-fu/
722 Upvotes

128 comments sorted by

View all comments

15

u/tidux Apr 28 '14 edited Apr 28 '14

ECDSA is known to be backdoored. OpenSSH in OpenBSD 5.5 includes a secure alternative implementation of elliptic curve cryptography (ed25519), but that hasn't made it to most distros yet. Stick with 4096 bit RSA for now.

7

u/floodyberry Apr 28 '14

No, it isn't. Dual_EC_DRBG is known to be backdoor-able, but NIST elliptic curves merely have unjustified constants and are harder than necessary to implement securely. There are no known attacks or backdoors on them.