TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Is a passphrase-protected SSH private key susceptible to a dictionary attack?

5 pointsby Inversechialmost 11 years ago

1 comment

2bluescalmost 11 years ago
The accepted answer is somewhat behind the times. Now the best way to secure a private ssh key is using the the new format utilizing bcrypt&#x27;s kdf[1] added to OpenSSH 6.5[2].<p>The new format makes it significantly harder (read: slower) to crack private keys, something much needed.<p>I&#x27;ve been using the new key format with ecdsa and ed25519. It&#x27;s worth nothing that and some things like GNOME Keyring&#x27;s ssh-agent don&#x27;t support the format just yet, so things like ssh-add to the agent appear to fail and I haven&#x27;t looked any deeper yet.<p>[1] <a href="http://www.tedunangst.com/flak/post/new-openssh-key-format-and-bcrypt-pbkdf" rel="nofollow">http:&#x2F;&#x2F;www.tedunangst.com&#x2F;flak&#x2F;post&#x2F;new-openssh-key-format-a...</a><p>[2] <a href="http://www.openssh.com/txt/release-6.5" rel="nofollow">http:&#x2F;&#x2F;www.openssh.com&#x2F;txt&#x2F;release-6.5</a>