OpenSSH 9.6 Supports ED25519 PEM Keys for SSH

OpenSSH 9.6 Supports ED25519 PEM Keys for SSH

OpenSSH is a widely used suite of security-related network-level utilities based on the Secure Shell (SSH) protocol. It was first developed by the OpenBSD project and has since been ported to many other operating systems. OpenSSH 9.6 has added support for ED25519 keys in PEM format for ssh(1), sshd(8), ssh-add(1), and ssh-keygen(1).

What are ED25519 keys?

ED25519 is a public-key signature system created by Daniel J. Bernstein. It is considered to be more secure than other signature systems, such as RSA or DSA. ED25519 keys are used to authenticate the identity of a user or system, and they are widely used in the field of network security.

What is PEM format?

PEM (Privacy-Enhanced Mail) is a widely used standard format for encrypted and/or digitally signed messages. It is also used as a container format for cryptographic keys, certificates, and other sensitive data. PEM files are base64 encoded ASCII files that use the .pem or .key file extensions.

Why is this support important?

The addition of support for ED25519 keys in PEM format in OpenSSH 9.6 is important for several reasons. First, it allows users to take advantage of the increased security provided by ED25519 keys. Second, it provides a more standardized format for storing and managing keys, making it easier to work with them across different systems and applications. Finally, it allows for better interoperability with other systems and applications that use PEM-formatted keys.

How to generate ED25519 PEM keys in OpenSSH 9.6

To generate an ED25519 PEM key in OpenSSH 9.6, you can use the following command:

This command will generate a new ED25519 key in PEM format and save it to the file ~/.ssh/id\_ed25519.

The addition of support for ED25519 keys in PEM format in OpenSSH 9.6 is a significant improvement for network security. It allows users to take advantage of the increased security provided by ED25519 keys and provides a more standardized format for storing and managing keys. With this support, OpenSSH continues to be a powerful and flexible tool for secure network communication.

References

• OpenSSH 9.6 Release Notes: https://www.openssh.com/releasenotes.html
• ED25519: https://ed25519.cr.yp.to/
• PEM format: https://tools.ietf.org/html/rfc7468

--end-article