SSH and Public/Private Keys

**Tracer Round** · January 23rd, 2005, 1:11 AM

As stated in Aric's very helpful post about SSH and Secuirty, you can log into Root while using a Public/Private Key pair. Aric says to use the largest bit value possible (4096) but doesnt really mention which type to use. For SSH Protocal 2, there are RSA and DSA. DSA is said that the password can be found in the key without too much effor. RSA is said to be more secure if it is supported on the server's side.

So I should generate an RSA key. Am I correct on this or am I mistaken?

Also, if an RSA key is more secury, why do the Support Staff use DSA keys? If you use DSA than you shouldn't authenticate with it on more than one computer per key.

I'm not poking at Surpass, by no means. Without thier support staff I would be still trying to configure my server. I am just being 'inquisitive'.

Tracer

January 23rd, 2005, 1:18 AM

I recommand RSA as well as using it

**Aric** · January 23rd, 2005, 3:17 PM

In truth, it doesn't much matter, but DSA has an edge in general use. However the advangages to a DSA key wouldn't be noticed if you only use it to log into SSH. If you use the key for other things like mail, etc. then you should go with DSA/DSS.

January 23rd, 2005, 1:11 AM	#1 (permalink)
Tracer Round MR. SECURITY Excelling Contributor Joined in Jun 2004 Lives in Orlando, USA Hosted on SH129 722 posts Gave thanks: 4 Thanked 1 Time in 1 Post	SSH and Public/Private Keys As stated in Aric's very helpful post about SSH and Secuirty, you can log into Root while using a Public/Private Key pair. Aric says to use the largest bit value possible (4096) but doesnt really mention which type to use. For SSH Protocal 2, there are RSA and DSA. DSA is said that the password can be found in the key without too much effor. RSA is said to be more secure if it is supported on the server's side. So I should generate an RSA key. Am I correct on this or am I mistaken? Also, if an RSA key is more secury, why do the Support Staff use DSA keys? If you use DSA than you shouldn't authenticate with it on more than one computer per key. I'm not poking at Surpass, by no means. Without thier support staff I would be still trying to configure my server. I am just being 'inquisitive'. Tracer __________________ 2005 Surpassies: Winner of Most Skilled Wordsmith SH129 - Power SH81 - OC5

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

January 23rd, 2005, 1:18 AM	#2 (permalink)
Dark Matter Guest n/a posts	I recommand RSA as well as using it

January 23rd, 2005, 3:17 PM	#3 (permalink)
Aric Just Some Guy.. Comfy Contributor Joined in Oct 2003 127 posts Gave thanks: 0 Thanked 5 times	In truth, it doesn't much matter, but DSA has an edge in general use. However the advangages to a DSA key wouldn't be noticed if you only use it to log into SSH. If you use the key for other things like mail, etc. then you should go with DSA/DSS.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)