Page MenuHomePhabricator

libssh supports non-standard DSA key of sizes different than 1k
Open, LowPublic

Description

The DSA support in SSH Protocol is defined in RFC4253 [1] with a reference to outdated FIPS-186-2 [2], which defines only key up to the 1024 b modulus. OpenSSH does not allow to generate any other than 1k keys, but might be possible to interoperate with different keys, since they are implemented in OpenSSL.

It would be useful to check interoperability with these non-standard key sizes against OpenSSL or other implementation, if we want to ship them in the next release.

This is not very important, but something I noticed during review of a code.

[1] https://tools.ietf.org/html/rfc4253
[2] https://csrc.nist.gov/csrc/media/publications/fips/186/2/archive/2000-01-27/documents/fips186-2.pdf

Event Timeline

Jakuje created this task.May 6 2019, 4:37 PM
Jakuje triaged this task as Low priority.