Agreed.
I was auditing some internal documentation for staff generating SSH keys, which includes setting up PuTTY on Windows. Noticing the *DSA key types had me slightly surprised given that PuTTY 0.81 was released on 2024-04-15. OpenSSH deprecated DSA in 2015 and will have it fully removed by 2025.
https://lwn.net/Articles/958048/
I was also kind of surprised OpenSSH doesn't have any quantum-safe client key types, even though the daemon supports NTRU Prime sntrup761 and X25519 with SHA-512.
Aaron Toponce ⚛️:debian: /
npub1t9…t8529
2024-08-05 22:31:38
in reply to nevent1q…zut5
Author Public Key
npub1t9cz9v7zph5jvadd8rjfp25msrx6r0hdxnsyfmx88k8qp3pvv04szt8529Published at
2024-08-05 22:31:38Event JSON
{
"id": "883a8e3f9c5e313b03031cf97643e596bb89af5650d6c0e3c9366b83a629aec3",
"pubkey": "597022b3c20de92675ad38e490aa9b80cda1beed34e044ecc73d8e00c42c63eb",
"created_at": 1722897098,
"kind": 1,
"tags": [
[
"p",
"9096f6e1a06dc4f6ed31358e994e9ab2eb46833b5f45a1805b2930412a817cc4"
],
[
"e",
"4d8b3b43e4d649e23263f469310464eafb73d7624858ddd859d41e7b6dc5ebcd",
"",
"reply",
"9096f6e1a06dc4f6ed31358e994e9ab2eb46833b5f45a1805b2930412a817cc4"
],
[
"proxy",
"https://fosstodon.org/@atoponce/112911784260593653",
"web"
],
[
"e",
"fe23521b77092aeb30e62633ff968efb281f71eceb743f91288ce44ee46b2acb",
"",
"root",
"597022b3c20de92675ad38e490aa9b80cda1beed34e044ecc73d8e00c42c63eb"
],
[
"p",
"597022b3c20de92675ad38e490aa9b80cda1beed34e044ecc73d8e00c42c63eb"
],
[
"proxy",
"https://fosstodon.org/users/atoponce/statuses/112911784260593653",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fosstodon.org/users/atoponce/statuses/112911784260593653",
"pink.momostr"
],
[
"-"
]
],
"content": "Agreed.\n\nI was auditing some internal documentation for staff generating SSH keys, which includes setting up PuTTY on Windows. Noticing the *DSA key types had me slightly surprised given that PuTTY 0.81 was released on 2024-04-15. OpenSSH deprecated DSA in 2015 and will have it fully removed by 2025.\n\nhttps://lwn.net/Articles/958048/\n\nI was also kind of surprised OpenSSH doesn't have any quantum-safe client key types, even though the daemon supports NTRU Prime sntrup761 and X25519 with SHA-512.",
"sig": "f613e5fa872c9f7eed182dab881e9545bcef0bc2a4c8960a459585b9ea71f03c50be10f2f9bfecc9369b596ebc788fb65bdd24f4368da120029c001de1c1e8de"
}