Embed Notice

@dequbed @Gaelan @theresnotime @q @izaya cryptographically they’re basically identical. Heck, I expected to be conceding “OK, SSH CAs use RSA with PSS instead of PKCS#1 v1.5 padding but no, we’re still using PKCS#1 v1.5 padding in a standard defined in 2018! :drgn_knife_angry:

So cryptographically there’s no difference between SSH rsa-sha2-256 and X.509 {iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-1(1) sha256WithRSAEncryption(11)}