Bigger SSH keys

  2010-12-01      83 words, 1 minutes

• key
• keygen
• openssh
• rsa
• ssh

No secrets here, just quick notes on how to generate bigger (safer ?) SSH keys.

Server keys generation:

# /usr/bin/ssh-keygen -t rsa1 -f ssh_host_key -N '' -C "tumfatig.local" -b 4096
# /usr/bin/ssh-keygen -t dsa -f ssh_host_dsa_key -N '' -C "tumfatig.local" -b 1024
# /usr/bin/ssh-keygen -t rsa -f ssh_host_rsa_key -N '' -C "tumfatig.local" -b 4096

Personal key generation:

# ssh-keygen -t rsa -C "joel@carnat.net" -b 4096

This should strengthen the key exchange phase in the cost of more intensive CPU usage during this phase.