Re: ssh-keygen specify max keysize for ed25519

2019-07-04 Thread Christian Weisgerber
On 2019-07-03, jungle boogie wrote: > $ ssh-keygen -t ed25519 -b 1000 > Bits has bad value 1000 (too large) That's fine, that's a generic argument parsing error. > $ ssh-keygen -t ed25519 -b 2 > key bits exceeds maximum 16384 That error makes no sense. ED25519 keys have a fixed le

Re: ssh-keygen specify max keysize for ed25519

2019-07-02 Thread jungle boogie
Thus said Theo De Raadt on Tue, 02 Jul 2019 22:45:29 -0600 I think this is fine. At the point where the -b argument is matched, it is not clear what key-type is being handled. It is in your case, but not if -b and -t arguments are swapped. You can go read the source to see why. Cool! Than

Re: ssh-keygen specify max keysize for ed25519

2019-07-02 Thread Theo de Raadt
I think this is fine. At the point where the -b argument is matched, it is not clear what key-type is being handled. It is in your case, but not if -b and -t arguments are swapped. You can go read the source to see why. jungle boogie wrote: > Hi All, > > $ ssh-keygen -t ed25519 -b 1000

ssh-keygen specify max keysize for ed25519

2019-07-02 Thread jungle boogie
Hi All, $ ssh-keygen -t ed25519 -b 1000 Bits has bad value 1000 (too large) $ ssh-keygen -t ed25519 -b 2 key bits exceeds maximum 16384 Should the first example report the max bits like in the second example? This happens to be: kern.version=OpenBSD 6.5-current (GENERIC.MP) #86: F