Translate
|
Berklix - Secure Shell KeysFingerprintsThis Is http://www.berklix.net/berklix/ssh_keys.html
|
| ssh-keygen -l -v -f ssh_host_key.pub 2013-06-03 |
1024 SHA256:O4Hf1D/tSoecXD/jgDY2IxRME1olDMu8XXeGhi6I51w root_ERASE@berklix.org (RSA1) |
+---[RSA1 1024]---+ | .o*o. | | o *.o . . | | = o o + o | | ..+ +.o o | | ..+SE... .| | +.o=. .+ =.| | o+..B .Oo+| | .+ +.o+o| | .o.| +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5 -f ssh_host_key.pub 2013-06-03 |
1024 MD5:5a:5f:58:d9:e7:86:00:e1:f5:77:e5:c4:9b:4f:ec:60 root_ERASE@berklix.org (RSA1) |
+---[RSA1 1024]---+ | o.. .o| | . o + oo| | . + o.B| | o .EB+| | S . ...++| | o . . .o| | . . | | | | | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_dsa_key.pub 2013-06-03 |
1024 SHA256:Buox0CHDyhoBbQRcY+i5+3E8tJmuijlLQTQ4wuqIY2k root_ERASE@berklix.org (DSA) |
+---[DSA 1024]----+ |BB*+. | |*+*+.. | |=*o . . | |=+ . . . | |=oo +. S | |=E..oo+. | |oo...B | |+o + . | |++oo.. | +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5 -f ssh_host_dsa_key.pub 2013-06-03 |
1024 MD5:eb:e1:66:cc:84:a8:34:17:c6:85:5f:e4:04:2c:8a:26 root_ERASE@berklix.org (DSA) |
+---[DSA 1024]----+ | o.oo | | o oo. | | . o + .. | |E.. + . | |o . o .S | | o o . .. | | . + +o | | . o=. | | oo | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_ecdsa_key.pub 2013-06-03 |
256 SHA256:+oa6M71up00U56GnAjtDedH4+5bxbcZhExLyeQfgZQw root_ERASE@berklix.org (ECDSA) |
+---[ECDSA 256]---+ | E+o | | o ...oo | | o o oo.o . | | . o = .+ o .| | + . S o o o | | . + o +. + | | +.o.+ + + o | | oo+=o.o . = | | oB+=o.. o | +----[SHA256]-----+ |
| ssh-keygen -l -v -E MD5 -f ssh_host_ecdsa_key.pub 2013-06-03 |
256 MD5:b8:f5:f7:99:71:50:be:80:be:d8:27:f3:50:c0:9d:3a root_ERASE@berklix.org (ECDSA) |
+---[ECDSA 256]---+ | | | . . . | | o o .| | . + o | | . S E o. .| | o .. o ...| | . .o. ...| | o+oo = | | . o=.+ | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_ed25519_key.pub 2016-08-17 |
256 SHA256:gadi2EGefRFx5HQ17cKQI7tbwosdn1eYwN0pHH0W2ko root_ERASE@land.berklix.org (ED25519) |
+--[ED25519 256]--+ | . +++ .o+o.| | o o . =..+.oo+| | + o + .+.E.=o| | o . + .. +o=.o| | . + . S. . o.+ | | . . = . o .| | o B . . | | . + o . | | . | +----[SHA256]-----+ |
| ssh-keygen -l -v -E MD5 -f ssh_host_ed25519_key.pub 2016-08-17 |
256 md5:86:78:19:c0:3a:51:ac:34:33:5d:d7:b4:b0:9c:cc:bf root_ERASE@land.berklix.org (ED25519) |
+--[ED25519 256]--+ | =o.. oo. | | * +. = +.. | | . B . * . | | + . + . | | .. + S . | | . . . | | E | | | | | +------[md5]------+ |
| ssh-keygen -l -v -f ssh_host_rsa_key.pub 2013-06-03 |
2048 SHA256:DiAH/aMukZ90T6+q4epKpTwiQrDPj3ljoStmn/5J0KE root_ERASE@berklix.org (RSA) |
+---[RSA 2048]----+ | .. | | .. | |. . oo | |.. oo.+ | |.. E o..S | |oo= = .o. | |+=o*.= o.. | |*o+=X.. . . | |++OX==.... | +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5
-f ssh_host_rsa_key.pub 2013-06-03 |
2048 MD5:c4:6f:fb:4e:2b:3f:bc:30:af:da:42:7f:f8:03:b3:31 root_ERASE@berklix.org (RSA) |
+---[RSA 2048]----+ | | | . | | o | | . . | | S o | | ..E. | | . .+O. | | ..=*=. | | .ooBO+ | +------[MD5]------+ |
slim.berklix.org OLD INVALID @ 2023-06
| ssh-keygen -l -v -f ssh_host_key.pub 2016-07-31 |
2048 SHA256:fj43ypQ7La17cyo72lRFv78COHwx6U7Eiq6ks80BFTo root_ERASE@slim.berklix.org (RSA1) |
+---[RSA1 2048]---+ | . . | | . . . . | | E . . . . .| | o * . .| | . S = + . | | . o = B .| | o. . Xo. .| | .= .. B*oB.. .| | oo+. ..X&.=.. | +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5 -f ssh_host_key.pub 2016-07-31 |
2048 MD5:6d:55:53:7c:50:7f:50:c1:03:ef:b7:4e:55:19:f6:fb root_ERASE@slim.berklix.org (RSA1) |
+---[RSA1 2048]---+ | .BX=| | .o=B| | . oB| | . . . +| | S o oo| | . =| | oE| | o | | . | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_dsa_key.pub 2016-07-31 |
1024 SHA256:iVn+ps+XXyT7DT4iru3dM/g0CalLYV48/dFHPeYo7Mw root_ERASE@slim.berklix.org (DSA) |
+---[DSA 1024]----+ | | | .| | . oo| | = ... o+.o| | o S oo*.oo+| | +++.o *o| | *E o* o| | *.o=++=.| | o=Bo.+=+o| +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5 -f ssh_host_dsa_key.pub 2016-07-31 |
1024 MD5:e2:3b:2e:59:40:58:fd:34:55:13:fc:df:80:4d:9a:e9 root_ERASE@slim.berklix.org (DSA) |
+---[DSA 1024]----+ | o.. ..o+. | | . . . o ... | | . o . O | | . . = + | | .. S . o.| | ... E o| | o. | | o .. | | oo. | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_ecdsa_key.pub 2016-07-31 |
256 SHA256:o8fLHH47FICbE7WTBieREkIaedAyQ5kxO2GoOsTE8UM root_ERASE@slim.berklix.org (ECDSA) |
+---[ECDSA 256]---+ |*%BE..+=o | |BBO.. ++.o | |=B o . +=. | |.o. . +. .. | |o .S . | |o o .. | | . . +. | | = oo | | =..o | +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5 -f ssh_host_ecdsa_key.pub 2016-07-31 |
256 MD5:58:a8:51:ab:50:37:2e:0d:2c:81:ae:97:fb:b7:df:01 root_ERASE@slim.berklix.org (ECDSA) |
+---[ECDSA 256]---+ | ..oo + | |. ...* + | |. ..o = . | | . . = o | |. .o . E | |. o . | | . . . | | . . . . | | ....o. . | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_ed25519_key.pub 2016-07-31 |
256 SHA256:mvWs8UjJi2Wq50fA3CiHz0xfG2cslwONlZpJ6YbGxNQ root_ERASE@slim.berklix.org (ED25519) |
+--[ED25519 256]--+ | o.. =.. | | o E o | | + = + * . | | o B = X B | | B +So B . | | +=o+. | | o.B o | | .*.* | | .++.+ . | +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5 -f ssh_host_ed25519_key.pub 2016-07-31 |
256 MD5:71:0f:f1:14:6e:aa:cd:a8:9e:7b:e6:3a:b9:b8:99:b3 root_ERASE@slim.berklix.org (ED25519) |
+--[ED25519 256]--+ | . o. | | = | | . o + | | o = | | S . . | | = | | .o o | | .+ooo | | E=BO. | +------[MD5]------+ |
| ssh-keygen -l -v -f ssh_host_rsa_key.pub 2016-07-31 |
2048 SHA256:MGXI5OWlskyrW6/1t+SBtlQeba+NfzuPVuWaTKIjW84 root_ERASE@slim.berklix.org (RSA) |
+---[RSA 2048]----+ | o..+ . | | .o= o | | * o | | o * . .| | + S o o..| | . +.o..o| | . . . =.++ +.| | o o.Bo+..=*.| | . ..ooEooo+oO| +----[SHA256]-----+ |
| ssh-keygen -l -v -E md5
-f ssh_host_rsa_key.pub 2016-07-31 |
2048 MD5:89:1a:3d:a4:86:67:fa:bd:db:5e:34:13:67:34:08:84 root_ERASE@slim.berklix.org (RSA) |
+---[RSA 2048]----+ | oo. .o | | E .. . | | . . o | | . + . . + | | . * + S + | | = o . . o | | . . . | | . . . . | | . ++o | +------[MD5]------+ |
Syntax
| Key | Generation by FreeBSD /etc/rc.network | Fingerprint extraction (for this page) |
| ssh_host_key.pub | cd /etc/ssh; ssh-keygen -t rsa1 -N "" -f ssh_host_key | cd /etc/ssh; ssh-keygen -l -v -f ssh_host_key.pub |
| ssh_host_key.pub | cd /etc/ssh; ssh-keygen -t rsa1 -N "" -f ssh_host_key | cd /etc/ssh; ssh-keygen -l -v -E md5 -f ssh_host_key.pub |
| ssh_host_dsa_key | cd /etc/ssh; ssh-keygen -t dsa -N "" -f ssh_host_dsa_key | cd /etc/ssh; ssh-keygen -l -v -f ssh_host_dsa_key.pub |
| ssh_host_dsa_key | cd /etc/ssh; ssh-keygen -t dsa -N "" -f ssh_host_dsa_key | cd /etc/ssh; ssh-keygen -l -v -E md5 -f ssh_host_dsa_key.pub |
| ssh_host_rsa_key | cd /etc/ssh; ssh-keygen -t rsa -N "" -f ssh_host_rsa_key | cd /etc/ssh; ssh-keygen -l -v -f ssh_host_rsa_key.pub |
| ssh_host_rsa_key | cd /etc/ssh; ssh-keygen -t rsa -N "" -f ssh_host_rsa_key | cd /etc/ssh; ssh-keygen -l -v -E md5 -f ssh_host_rsa_key.pub |
| ssh_host_ecdsa_key | cd /etc/ssh; ... | cd /etc/ssh; ssh-keygen -l -v -f ssh_host_ecdsa_key.pub |
| ssh_host_ecdsa_key | cd /etc/ssh; ... | cd /etc/ssh; ssh-keygen -l -v -E md5 -f ssh_host_ecdsa_key.pub |
| ssh_host_ed25519_key | cd /etc/ssh; ... | cd /etc/ssh; ssh-keygen -l -v -f ssh_host_ed25519_key.pub |
| ssh_host_ed25519_key | cd /etc/ssh; ... | cd /etc/ssh; ssh-keygen -l -v -E md5 -f ssh_host_ed25519_key.pub |
ssh-keygen manual
Key Types
- 10.3-RELEASE: man ssh-keygen -t : dsa | ecdsa | ED25519 | rsa | rsa1
-
RSA1
- FreeBSD 11.0-RELEASE Mon, 10 Oct 2016 OpenSSH ... Protocol 1 support has been removed.
-
RSA
https://en.wikipedia.org/wiki/RSA_(cryptosystem) -
DSA Keys
- DSA Sensitivity (& ECDSA too): https://en.wikipedia.org/wiki/Digital_Signature_Algorithm
- DSA Keys Deprecated August 2016
-
- FreeBSD 11.0-RELEASE Mon, 10 Oct 2016 OpenSSH DSA key generation has been disabled by default.
-
http://lists.freebsd.org/pipermail/freebsd-announce/2016-August/001738.html
Subject: Re: [FreeBSD-Announce] HEADS-UP: OpenSSH DSA keys are deprecated in 12.0 and 11.0
From: Glen Barber <gjb@@@freebsd.org>
Date: Fri, 5 Aug 2016 02:09:50 +0000
OpenSSH DSA keys are deprecated upstream
> Please see r303716 for details on the relevant commit, but upstream no
> longer considers them secure. Please replace DSA keys with ECDSA or RSA
> keys as soon as possible, - https://svnweb.freebsd.org/base/?pathrev=303716
-
https://svnweb.freebsd.org/base/head/?view=log&pathrev=303716
Remove DSA from default cipher list and disable SSH1. Upstream did this a long time ago, but we kept DSA and SSH1 in FreeBSD for reasons which boil down to POLA .
- http://www.openssh.com/txt/release-7.3
-
ECDSA
: https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm -
ED25519
https://en.wikipedia.org/wiki/EdDSA
