OpenSSH 8.2 released February 14, 2020
reddit / BSD

----------------------------------------------------------------------
techsnapp · 2020-02-14 15:34

> It is now possible\[1\] to perform chosen-prefix attacks against the
SHA-1 hash algorithm for less than USD$50K. For this reason, we will
be disabling the "ssh-rsa" public key signature algorithm that depends
on SHA-1 by default in a near-future release.
>
> This algorithm is unfortunately still used widely despite the
existence of better alternatives, being the only remaining public key
signature algorithm specified by the original SSH RFCs.

----------------------------------------------------------------------
[deleted] · 2020-02-14 18:36

Very cool, FIDO/U2F linked private keys, let's hope there is
middleware/support for all supported platforms.

----------------------------------------------------------------------
krabelize · 2020-02-18 09:35

It does: [https://cryptsus.com/blog/how-to-configure-openssh-with-
yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-
ubuntu-18.04.html](https://cryptsus.com/blog/how-to-configure-openssh-
with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-
on-ubuntu-18.04.html)