Conversation

Notices

1. Embed this notice
   Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Dec-2025 18:03:12 JST Ryan Castellucci (they/them) :nonbinary_flag:

   I wrote a FUSE filesystem that allows you to have a different ssh key for every username/hostname combination. It supports ECDSA (P-256 by default, P-384 and P-521 possible) and Ed25519 keys, debating the merits of RSA key support.

   Are there still SSH services in use that support only RSA?

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Dec-2025 18:10:47 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • aschmitz

     @aschmitz Maybe. Trying to decide if I should care.

   • Embed this notice
     aschmitz (aschmitz@ostatus.lardbucket.org)'s status on Sunday, 14-Dec-2025 18:10:48 JST aschmitz

     in reply to

     @ryanc Old Dropbear, maybe?

   • Embed this notice
     Fritz Adalis (fritzadalis@infosec.exchange)'s status on Sunday, 14-Dec-2025 19:27:31 JST Fritz Adalis

     in reply to

     @ryanc
     Lots of stuff in Azure and Azure Devops still supports only rsa.

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Dec-2025 21:23:08 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Richard Levitte

     @levitte post quantum for auth?

   • Embed this notice
     Richard Levitte (levitte@mastodon.nu)'s status on Sunday, 14-Dec-2025 21:23:09 JST Richard Levitte

     in reply to

     @ryanc
     Heh, newer openssh versions complain that I still use ed25519.... Apparently, I should switch to post-quantum, like now, nownownow!

   • Embed this notice
     Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Dec-2025 21:23:55 JST Ryan Castellucci (they/them) :nonbinary_flag:

     in reply to

     • Stephen Paulger

     @aimaz For multiple accounts, see https://rya.nc/multi-github-accts.html

     The FUSE filesystem takes a seed file as a mount parameter then mixes that with parts of the filename to generate a key.

   • Embed this notice
     Stephen Paulger (aimaz@mstdn.social)'s status on Sunday, 14-Dec-2025 21:23:56 JST Stephen Paulger

     in reply to

     @ryanc that sounds like something I could use to handle having two GitHub accounts. Currently I have SSH configured to choose the key by hostname and I then modify the repo hostname to determine which key to use. It’s a bit of a faff but so far it’s the way that requires least work.

     I am intrigued how your FS works.