DSA or RSA bigger than 2048 bits

Question

DSA or RSA bigger than 2048 bits

Closed this issue 4 years ago · 3 comments

Several web-hosts require a DSA or RSA bigger than 2048 bits for their ssh keys (Siteground for example). My main use case for the OnlyKey-Agent would be SSH into a clients web host to deploy via git etcetera. Can the OnlyKey generate such keys, and if not will it ever be implemented?

Answer 1 · 2019-06-07T19:05:48.000Z

There's no such thing as a ED25519 key larger than 256 bits (512 for the public key), as far as I've read, so if your host supports that curve at all then it should support OnlyKey and onlykey-agent in their current state.

OnlyKey doesn't support generating RSA on-device and probably never will, because it would take a very long time for it to do so, but you can absolutely load a 4096 RSA key onto the OnlyKey. onlykey-agent doesn't currently support using RSA Keys, although adding RSA support to it is totally possible and would be a smallish project.

Answer 2 · 2019-06-08T04:49:30.000Z

I appreciate the information. It would be sweet if onlykey-agent supported using rsa keys i generated and loaded onto it.

…

On Fri, Jun 7, 2019 at 11:05 AM Max Pixel ***@***.***> wrote: There's no such thing as a ED25519 key larger than 256 bits (512 for the public key), as far as I've read, so if your host supports that curve at all then it should support OnlyKey and onlykey-agent in their current state. OnlyKey doesn't support generating RSA on-device and probably never will, because it would take a very long time for it to do so, but you can absolutely load a 4096 RSA key onto the OnlyKey. onlykey-agent doesn't currently support using RSA Keys, although adding RSA support to it is totally possible and would be a smallish project. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#9?email_source=notifications&email_token=AGIXG62KWHMDGE4WTVT634LPZKWQ3A5CNFSM4HVY2TG2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODXGXGCA#issuecomment-500003592>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AGIXG65XZLKIT7EPQUGI2ITPZKWQ3ANCNFSM4HVY2TGQ> .

Answer 3 · 2020-10-26T03:13:51.000Z

We have RSA keys on the roadmap for onlykey agent, in the readme