SSH generally best to use ed25519, for GPG RSA4096 is better supported by HSMs and slightly more secure for longer-lived keys like root keys.
this post was submitted on 13 Jan 2025
54 points (98.2% liked)
Linux
49079 readers
1 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
Others have provided the answer but if you want to explore system wide crypto policies check out update-crypto-policies
Don't understand. Check it out where?
The correct answer to this question should be ''Whatever is the current default".
If we have to ask and answer such questions as this (I'm unconvinced), then something is really wrong.
Short Answer is ed25519, which is the new default key encryption in open SSH. Here's an explainer that helped me
Thanks! Cool video, I like her style. (Will look into the specifics of ed25519 out of interest when I have time... So, most probably not and I'll just use it ;-D)
For GPG it is the same?
RSA4096 has a bit of an edge over ed25519 both in effective key size as well as support by things like YubiKeys and other HSMs that is beneficial for GPG but not really helpful for SSH.
Ah, that's a good point, thanks!