OpenSSH is about to change. (For the better.)

Рет қаралды 137,909

Күн бұрын

OpenSSH's `ssh-keygen` command just got a great upgrade.
In today's episode, I cover how Ed25519 keys are now the default, and how it probably doesn't impact your workflow. I'll briefly cover how the whole thing works, in an under 10 minute video. As per the custom in these parts, there's a few vintage computing goodies peppered throughout the episode.
🫶 Support (how this channel makes money) 🫶
This episode of Veronica Explains isn't sponsored by anyone other than you. Your support makes this show possible, and I appreciate your consideration. Supporters at the $2/mo level get a weekly newsletter from me.
/ veronicaexplains
ko-fi.com/VeronicaExplains
You can also buy nerdy shirts from my web store (it's not sponsorship, I literally host and maintain the web store myself, and my family designs the merch): vkc.sh/merch.
🤩 What I'm Watching! 🤩
Macintosh Librarian put out a great video about a Power Computing Macintosh clone recently that really caught my eye. I find the history of Apple, and Apple-adjacent technology fascinating, and if that's something you're into as well, Macintosh Librarian is worth your attention.
Her recent video: • Awesome Macintosh Clon...
Her channel (which you should subscribe to): @MacintoshLibrarian
🖥️ Commands used during the making of this video 🖥️
`ssh-keygen` by itself: creates a default key in the default location (usually the .ssh folder inside the home directory).
With options, it gets more features. The `-t` option specifies the key type:
-- `ssh-keygen -t rsa` generates an rsa key
-- `ssh-keygen -t ed25519` generates an ed25519 key
You'll see me combine this with the `-f` option to specify the output file(s). So `ssh-keygen -f .ssh/testkeylmde -t ed25519` would create a key pair in the .ssh folder with the filename "testkeylmde" (and "testkeylmde.pub" for the public file).
You can then use `ssh-copy-id` to transfer and set up the public keyfile on a server, so that your private key will work with it:
`ssh-copy-id -i [path-to-public-key] [user][at][server]`
As I mentioned a few times, I have a more thorough OpenSSH video: • OpenSSH for Absolute B...
And for further reading about cryptography in general, here's some Wikipedia I referenced in the video:
- RSA: en.wikipedia.org/wiki/RSA_(cr...)
- Curve25519 (where ed25519 gets its mathy bits from): en.wikipedia.org/wiki/Curve25519
- The Twisted Edwards curve: en.wikipedia.org/wiki/Twisted...
- EdDSA (the section on Ed25519): en.wikipedia.org/wiki/EdDSA#E...
📖 Chapters 📖
0:00 News about OpenSSH!
1:48 The basics of OpenSSH and ssh-keygen
4:27 How does this change impact you?
7:34 Now's a good time to prune your keys
9:04 What I'm Watching: Macintosh Librarian
#linux #homelab #openssh

Пікірлер: 423

@billv4987 5 ай бұрын

Officially requesting that "Oh No! Am I going to have to do some work, Veronica?!" becomes a regular line in your show.

@VeronicaExplains 5 ай бұрын

I might make it work!

@kahnzo 5 ай бұрын

oh, no...

@cbscbs 5 ай бұрын

+ also "Linux is awesome, and so are you."

@abandoninplace2751 5 ай бұрын

Ringtone. That is all.

@LunaLorea 5 ай бұрын

I read that comment exactly at the moment this sentence fell.

@Montegasppa 5 ай бұрын

It’s never a bad idea to update SSH keys regularly - even better when there is a more secure algorithm. 🙂

@VeronicaExplains 5 ай бұрын

I try to replace mine every two years or so. Sometimes with dev/play servers I let them go a little longer, but those usually aren't even on most of the time when not in use!

@Johan.Molenberghs 5 ай бұрын

Hi @@VeronicaExplains. Great vid. However NIST is recommending to rotate your keys every 1 to 12 months now ;)

@VeronicaExplains 5 ай бұрын

Oooo, I don't see that in their last whitepaper I read. Is this new? (Note, any link you share here might get auto-blocked but I'll hopefully see it, vet it, and then allow it through.)

@dingokidneys 5 ай бұрын

@@Johan.Molenberghs I'd think that this would only be necessary if you have really bad security hygiene; dropping your keys onto every machine that you touch. If you manage your keys well I can't see how changing them like you change your underpants actually helps. (1 to 12 months: yes, I'm a dirty old man :)

@Montegasppa 5 ай бұрын

Good to know, @@Johan.Molenberghs. I usually do the same as @VeronicaExplains does, updating my keys every couple of years.

@peterboil4064 5 ай бұрын

Love the TLDR right after 5 seconds 😀

@VeronicaExplains 5 ай бұрын

Doing my part to reduce clickbait! :P

@shadowDXS 5 ай бұрын

I'm so happy I subscribed to this channel. Love the content.

@Centomila 5 ай бұрын

I subscribed when I read "no paid product placement"

@codeartha 5 ай бұрын

Xana, so many good memories

@Maverick_Mad_Moiselle 2 ай бұрын

Woohoo!! Code Lyoko!! \o/

@syrus3k 5 ай бұрын

I always like to describe public keys like locks and private keys like ... keys. I find this works well

@RAN-os5gz 5 ай бұрын

Yeah, I think this is the best analogy. They are tied together in the same way

@GSBarlev 5 ай бұрын

I mean, I guess? It's basically, "Here, I'm going to hand you this lock so that the next time we meet, you'll know it's me, because I'm the only one who can unlock it."

@Gornius 5 ай бұрын

Public key is smart card reader, private key is your smart card. You can register your smart card to any amount of readers.

@LaughingOrange 5 ай бұрын

@@Gornius You can also pin any amount of locks to fit a given key.

@jortmungandr1112 5 ай бұрын

so great to see you back! Set looks like it's coming along well, and I hope things are turning for the better across the board for you!!

@tomm5905 5 ай бұрын

Great video again. You can really see how much time, creativity and effort you put into editing your videos. This 10m videos must have taking a day to make.

@wombatdk 5 ай бұрын

Love SSH... fast, secure, can do file transfers easily multiple ways... and can trivially be centrally managed with a key server. That might be an idea for a vid too: Key servers. Edited to add: I mean e.g. LDAP vs universal key managers vs simple inotify to copy pub keys to servers that kind of thing. More than one way to skin SSH. :)

@Andrath 5 ай бұрын

Uhm no. The whole point of the SSH key system is to easily create and distribute keys. The ed25519 keys are short so they are perfect, Look into ssh-copy-id. There is probably a manpage. You can just publish those keys pretty much anywhere. Hey, you could piggyback them on the GnuPG keyservers as a comment.

@billschrimpf6814 4 ай бұрын

using signed keys and KRL is part pf this

@SRG-Learn-Code 5 ай бұрын

Damn, pitching out other channels is great! but also adding those in the description as well is a sign you are the best!! This channel is pure gold. The topics you cover are not my everyday needs but the most useful when I'm in trouble, which would be my everyday if not for you. Also the script is clear and well delivered, good amounts of comedy and plenty of well researched information distilled with great filmmaking and awesome animations. In any case, I'll recommend this channel as an example of how to do things properly. Even the captions are corrected! Great effort, great results. Thanks for sharing.

@VeronicaExplains 5 ай бұрын

This comment brightened my day. Thank you so much!

@SRG-Learn-Code 5 ай бұрын

@@VeronicaExplains

@mrstevil3000 5 ай бұрын

Thank you for another excellent video, Veronica. Yesterday I discovered sshfs. It seamlessly mounts a remote directory to your local system using ssh. It made life on my multi-OS home network much easier. Have a great day!

@comosaycomosah 5 ай бұрын

your videos always have such a good vibe

@Kehvarl 5 ай бұрын

OpenSSH is awesome, and so are you! This was a good bit of SSH info, and I found it nicely informative. It also reminded me to go clean up and regenerate my keys!

@jeschinstad 5 ай бұрын

5:15: That was incredibly well done! Wow! :) Great video. Thoroughly enjoyable.

@jamescs50 5 ай бұрын

Thanks for this. More please! More of everything please!

@SamHart69 5 ай бұрын

First post "I quit COBOL" video and I love it. From one old-timer engineer to another, "great job, keep it up!"

@CharlieBasta 5 ай бұрын

Favorite tech channel on KZfaq. Love your content Veronica

@ezequielpartida5846 5 ай бұрын

I love your videos! Great tips and very positive energy, you ALWAYS make my day 😁, by the way, the C=64 and Amiga Boing reminded me of all the fun. Thanks and Greetings from Northwest Mexico.

@VeronicaExplains 5 ай бұрын

Thank you! Your comment made my day!

@okj579 5 ай бұрын

I love your retro visuals!

@WolfgangsChannel 5 ай бұрын

It would probably take a while for me to stop using the `-t ed25519` parameter 😁

@ciscovip1 5 ай бұрын

Lover your stuff. Keep doing it❤

@KevinYCurrence2015 5 ай бұрын

Oh that ending. LOL!! Thank you for another wonderful and informative video.

@VeronicaExplains 5 ай бұрын

I'm glad you stayed until the end! It was a lot of fun. :)

@DavidHuffTexas 5 ай бұрын

Thanks for the explanation, and yes - the Macintosh Librarian channel is a _bunch_ of fun!

@strouja 5 ай бұрын

Thanks. I just watched this as my 1st video from you. Good job as all my instructions always have -T option. I did run into this issue with Hadoop I think that needed RSA keys vs ed25519, the newer modern one that you and I use.

@bobbyfried7478 5 ай бұрын

i want to set up a home network and ssh into my wife's laptop. so i really have to breakdown and learn ssh. thanx for your excellent videos. you always give details. i like that.

@MacintoshLibrarian 5 ай бұрын

Thank you for being an awesome smart woman! and for linking my channel :) !

@VeronicaExplains 5 ай бұрын

Thank YOU for making awesome videos which help all of us learn more! :)

@TradieTrev 5 ай бұрын

I didn't even know this was a thing! Thanks Veronica for your explanation!

@nicozica 28 күн бұрын

Oh No!! Am I going to have to do some work Veronica?? 😄🤗 Your videos are so enjoyable to watch!

@EugeneChiang-me 5 ай бұрын

Absolutely fantastic config file at 8:35. 👍🏼the Brian May reference!

@jarrodurban6927 5 ай бұрын

Great news. I am happy about the change. The length of the public keys make a practical difference. The new keys fit on one line, and are easy to copy and paste.

@broimnotyourbro 5 ай бұрын

1. Couldn't agree more about the Macintosh Librarian- one of my favorites 2. Thank you, this is exactly the kind of fun yet informative content that is so hard to find. Hitting the patron.

@broimnotyourbro 5 ай бұрын

Ok, ko-fi not patron. 🤷‍♂️

@scottrussell6873 4 ай бұрын

I always smile when I see your smiling face 😄, (and learn from your explanations.)

@BrianRonald 5 ай бұрын

I also switche dto ed25519 keys years ago, and I'm glad it's now the default. It took me years to remember the digits.

@germangarciafernandez 5 ай бұрын

Great video, great reminder. Un saludo desde Bogotá

@bradm8529 5 ай бұрын

Incredibly well made video

@hyoryo 5 ай бұрын

That is why i love MikroTik network equipment. even after over twenty years their switches and APs still get firmware updates to support the newest tech.

@hangman0004 5 ай бұрын

Nice to see you back making videos!

@VeronicaExplains 5 ай бұрын

Thank you! Hopefully now the cadence picks up a bit!

@nycki93 5 ай бұрын

This is the first video of yours that I've seen and I am immediately struck by how clearly you communicate! Both in terms of your script, and in terms of literally enunciating clearly. You stress the tricky consonants enough that my autistic brain can pick them out, but without going so far that it's just silly. That's such an awesome skill for a teacher to have and I'm so glad you enjoy what you do!

@GA-jm6sh 5 ай бұрын

This is so good. Finally, someone is addressing topics like these.

@praus 5 ай бұрын

Been loving Macintosh Librarian. She really hits you right in the nostalgia button, assuming you used old Apple and Macintosh computers in school. It’s also really neat to see the things people have come up with to keep old tech running or even expand it’s capabilities, far beyond what was possible when it was new.

@Mysticsam86 4 ай бұрын

I just checked my FreeBSD-14.0 system and needed to update the config. Thanks for this info!

@ChrisHarringtonMinneapolis 5 ай бұрын

The intro fakeout was fantastic, glad I had set my coffee down

@colinmaharaj 5 ай бұрын

I'm looking behind you and I see you're on top of things

@SnowTheParrot 5 ай бұрын

Veronica is BACK!!!!!!!!!!!!!!!!!!!!!!

@codephilosopher 5 ай бұрын

Love your videos, Thank you.

@Acorn_Anomaly 5 ай бұрын

One thing that might be cool to cover in the future is SSH certificates. They're built in to OpenSSH, with commands for managing them built in to ssh-keygen. But they're useful because they allow you to essentially create auto-trusted, but auto-expiring keys for any user on the system. You can limit the authorization for the certificate to specific dates/times, specific users, even specific uses of SSH. One benefit is not needing to reconfigure the target system with an updated authorization when a new key is created. As long as a new cert is generated, and signed by a key trusted by the target, the new cert will be accepted, without needing to update authorized_keys. And the "CA key" trust can be specified by the authorized_keys file or by a config option in sshd_config.

@dieselbaby 5 ай бұрын

Yup, you can combine this kind of thing with something like Keybase and use it to manage your own custom CA for key management, it's fantastic.

@kevincozens6837 5 ай бұрын

Informative video. I will update my procedures to use the newer type of keys. I will watch the other video for information about the catalog to see if it will help me. I have multiple key pairs which results in ssh giving up on login attempts before finding the right key. I made some shell scripts to tell ssh which identify to use when I want to access certain systems.

@peterbrown6224 5 ай бұрын

Thank you for saving me from having to find this out. Pausing my recovery for a moment, I can imagine this breaking things at my old workplace, perhaps on OpenVMS stuff. But as they are not paying me, I'm going to watch a cat video.

@Cucuska2 5 ай бұрын

Love the content! One question I keep pondering watching your videos is that are you and the Technology Connections person connected in any way? Your jokes and style feel very similar to me and I am having an absolute blast yours and his videos!

@pato6350 5 ай бұрын

Love the video, thanks!

@danjoseph5707 5 ай бұрын

Great video! Thanks :)

@kevin___ 5 ай бұрын

Thanks for making this video. I usually added the ed25519 type to generate my keys, seems my keygen command just got simpler. Would/could you do a video on proper ssh key management? That is something I still have issues with how to properly administrate them.

@guitarbuddha74 5 ай бұрын

The edge cases I usually seem to hit in the past with ssh keys were related to software that used ssh internally. Like some kind of niche software for a company. There would usually be some code that specified the type of key and I couldn't use newer types of keys with it.

@estudiordl 5 ай бұрын

Just yestarday I generated a new keypar for a fresh arch install and when I pasted the public key on my nas server, I noticed this weird new key that look nothing like my old ones. Thanks for the info 😅😊

@james_neko 5 ай бұрын

There's also different curves or curve parameters. As I understand it, ECDSA uses some curves published by NIST, where they say "Use these curve parameters" without any particular justification, and people speculate the NSA may be involved in getting them to endorse those particular parameters. The Curve25519 curve used by Ed25519 is also allegedly maybe more secure when it comes to side-channel attacks? But at this point I'm beyond my ability to assertively repeat that information.

@ben_spiller 5 ай бұрын

The NIST curves are suspect because some of the parameters are randomly generated. NIST publishes the seeds used for the random number generator, but no explanation how they came up with the seeds (they look random). They could have used a nothing-up-my-sleeve number but they didn't.

@rebane2001 5 ай бұрын

It's awesome ed keys are the default now, been using them for a while just so the authorized_keys entries would look neater

@jblacktube 5 ай бұрын

You're insanely talented, and the information that you provide is so important to hear, so I say this with deep respect. My hearing isn't what it used to be, and sometimes it can be be a difficult to understand words when the pitch goes too high. Thankfully closed captioning helps, but if you could keep an ear on your pitch for the benefit of older listeners when you record your videos? Thanks again for all the great information!

$@fractalMD$

@fractalMD 4 ай бұрын

My guy. She talks how she talks. This is not a reasonable request. She puts huge effort into the closed captioning for this reason.

@jblacktube 4 ай бұрын

That's not for her to say, not you. =) It is fair for me to say that I need to hear what she's saying. As mentioned, I do use the closed captioning and that does indeed help! You're right that I'm requesting reasonable accommodation, like asking a spouse to use a lower shelf in the kitchen, or a phone app to allow the setting of larger font sizes to ease readability. I'd like to think that we don't (yet) live in a world in which we tell others that they should just go buy a ladder or rely on screen readers. Veronica puts a great deal of effort in taking complex, detail oriented topics and delivering content that is both accurate and nuanced. She also certainly puts considerable thought into delivery style as well and modulates her voice to make the monologues more interesting. The only catch is that it can affect the comprehension for those with hearing loss if not moderated well.

@SRG-Learn-Code 5 ай бұрын

Can't explain why but your style reminds me of such of the Beakman's Science Show, great synergy between info and entertainment. I really like your production style. Thanks for sharing.

@SRG-Learn-Code 5 ай бұрын

It might be the fingerless gloves...

@dingokidneys 5 ай бұрын

I just finished changing all my keys over to ed25519 a couple of days ago. I had no idea they'd be changing the default so this is good news. I always had to either run '--help' or do a quick 'man ssh-keygen' cause I could never remember ed25519 and then because I had an old rsa key still hanging around I'd always have to specify the id file either on the command line or in a config file which was a bit of a drag.

@KeritechElectronics 5 ай бұрын

Nice news on the SSH updates. While there's no problem if both client and server run a modern version of openssh, it could be confusing to connect from modern to legacy system (e.g. an OpenWrt router which hasn't been sysupgraded for years), but all can be done with some knowledge and google-fu. Hey, nice to see the creator shoutout! Who knows, maybe I'll end up there someday :D

@autohmae 5 ай бұрын

Also: if you allow password login, you should still be able to login with password.

@patricklebel1141 5 ай бұрын

That Commodore 128 I dreamt to have back in the day... Until I saw the Amiga 500. Got the 500 and I never regetted it!

@Darkk6969 5 ай бұрын

Same here! 😁

@LarryGarfieldCrell 5 ай бұрын

I love the random Commodore 64 drops. I remember using that machine. Good times. :-)

@rmbelousov 5 ай бұрын

Thanks for the video! Somewhere in enterprise RSA is still requirement, on modern systems too. "Azure currently supports SSH protocol 2 (SSH-2) RSA public-private key pairs with a minimum length of 2048 bits. Other key formats such as ED25519 and ECDSA are not supported."

@davidjohnston4240 5 ай бұрын

Enterprise deployments tend to chase FIPS compliance and Ed25519 is not quite there yet with NIST. The NIST curves like P256 are trusted by no one but still used as the least bad option unless you consider RSA the least bad option. Everyone is annoyed with NIST about them taking so long to get the whole Ed25519 certification cake baked.

@aysnov 5 ай бұрын

RSA *is* the least bad option. Even if you're willing to use crypto parameters from a three-letter agency, non-ed ECDSA is a giant footgun.

@davidjohnston4240 5 ай бұрын

@aysnov RSA is resource intensive compared to the others. It scales poorly too. NIST aren't even working on writing up the ed25519 specs which tells you that they are doing thier best to delay its adoption.

@aysnov 5 ай бұрын

I'd argue "resource intensive" beats "leaks your private key if you ever use it with poor RNG". Key exchange performance shouldn't really matter on anything reasonably modern anyway, short of maybe some very constrained embedded systems.

@davidjohnston4240 5 ай бұрын

@aysnov A poor RNG is never going to be a problem for me (My job). But my primary concern is the side channel and fault injection properties. RSA sucks more than EC in that respect, but the side channel research changes pretty fast so it might be less true over time. Small devices (eg smart cards) have issues with computing large RSA operations. The intersection of good algorithms and NIST compliant algorithms is nothing.

@klassica 5 ай бұрын

Recently got a nice deal on a very old Cisco PoE switch. When attempting to SSH into it, I wasn't supersized that doing so required setting flags for algorithms no longer supported by default, like SHA1 and aes-256-cbc.

@VeronicaExplains 5 ай бұрын

Yup! That's a thing with a lot of old network equipment!

@NeverlandSystemZor 5 ай бұрын

Oh I love Mac Librarian! Her vids are so good.

@RadeonArch2437 5 ай бұрын

Awesome retro feeel u give in ur videos, I date back to PC-XT days of Dos

@chucko22758 4 ай бұрын

Hi, new subscriber, but ooold S/W guy here. Coupla things: I work for a contractor at a US Gov't agency known throughout the solar system (ahem). The servers on one of my projects don't accept ed25519... they insist on ECDSA, which has, shall we say, a controversial history. Given a choice, I'll use ed25519 key pairs; I trust djb a whole lot more than I do NIST. The other thing: My spouse and I had Power Computing machines in the brief window when Apple allowed clones, before the Second Coming of Jobs. They were pretty cool machines, and the company had an Attitude that I found refreshing. Thanks, looking forward to more of your content!

@cristianseres1353 5 ай бұрын

Abloy and SSH, two well-known Finnish invention for security. I am old fashioned and still prefer 3072 bit RSA keys for SSH and Abloy Protec² for mechanical locks.

@EricaCalman 5 ай бұрын

Commands in the description, this is why I come here! Well, one of the many reasons.

@kevinvoiceactor9694 5 ай бұрын

Oh great! I've been wondering why RSA is still so common as default. -- Edit -- I loved both the early intro and early outro!

@TheMostOrdinaryPersonOnEarth 5 ай бұрын

I do sysadmin in a "legacy" setting (so many stupid windows servers), we are just looking at transferring to ssh keypairs... Although somehow we run docker containers like they're going out of fashion. Gonna go watch the OpenSSH video now, cheers!

@ZijZijnZijnZoons 5 ай бұрын

I liked the fake-out on the exit music midway through the video.

@LilRofl 5 ай бұрын

Oh snap! This is a great change!

@demostenesramos 5 ай бұрын

Awesome 😎

@MadMathMike 5 ай бұрын

First time viewer, and I'm only 20 seconds in, but I like your intro! 🙂

$@fractalMD$

@fractalMD 5 ай бұрын

Love the shirt!!!

@VeronicaExplains 5 ай бұрын

Thanks! It'll be available at vkc.sh/merch soon. :)

$@fractalMD$

@fractalMD 5 ай бұрын

@@VeronicaExplainsEVERYONE NEEDS IT

@UpLateGeek 5 ай бұрын

I can't recall ever seeing the ED25519 option whenever I've generated SSH keys on Cisco gear, so I'm guessing it either doesn't support it, or possibly calls it something else. The latter wouldn't surprise me, since Cisco seem to like having their own way of doing things. Also, Macintosh Librarian is a great channel! Maccy is so much fun!

@666Tomato666 5 ай бұрын

There's no need to so I'm pretty sure they won't do it. Also, I'd expect them to want gov certifications (FIPS, and the like), Ed25519 wasn't allowed in those until very recently (like 2023)

@AlanCanon2222 5 ай бұрын

Yay, I needed to get sshd running under Ubuntu after doing a complete wipe/reinstall a few weeks ago, so this would be the perfect time to see if this improvement is in the changelogs, or whatever. I'm just accessing my PC from my Chromebook, so I'm no power user of sshd, but it's always fun to delve into a part of Linux that I normally just "set and forget". Thanks for the info.

@bogdanrzheusski8115 5 ай бұрын

You can always specify encryption you want to use for key generation yourself with > ssh-keygen -t

@AlanCanon2222 5 ай бұрын

@@bogdanrzheusski8115 Thanks, yes, as Veronica explained. That's what I wound up doing, as my ssh-keygen isn't yet the newest release (Ubuntu being downstream of Debian). Read the man page for it too, like every day with Linux, a learning exercise.

@Shocker99 5 ай бұрын

7:45 Queen - 39, nice!

@gabrielb.8518 5 ай бұрын

I have LMDE6 on an old Dell M4700. Till now, for me the minus is the way to configure an Access Point. I`m wondering if you also found some stuff that needs some refactory/improvement.

@hunglikeahamster 4 ай бұрын

I remember integrating RSA keys into LDAP years ago and found that I had to strip the line ends of the public key before it would work. I wonder if I'd have to do the same with this key type?

@wezzelinator 5 ай бұрын

So happy about this. It was so annoying to need to google it every time because who can remember ed2?????

@VeronicaExplains 5 ай бұрын

Here's a tip- in most terminals you can type `-t ed` and then hit tab. On the few I regularly use, it autofills the rest. :)

@wezzelinator 5 ай бұрын

@@VeronicaExplains oh yeah auto-completions are standard now... 😅

@MeriaDuck 5 ай бұрын

Hi from the patreon crowd! Using ssh since 1997, this was new to me!

@KristianAugust1964 5 ай бұрын

Love your videos! Interesting. I've used linux since 1993.

@KeritechElectronics 5 ай бұрын

That's a lot! Real deal old guard.

@scottfranco1962 4 ай бұрын

I like that your "Unix and linux system administration" is serving to raise your monitor height.

@GeordiLaForgery 5 ай бұрын

I always get Ed25519 and ED-209 mixed up. 👍

@ironfist7789 5 ай бұрын

HAHA, I was getting ready to post about the ed209, but then I saw your post :P Cool that it is going default now

@randomgeocacher 5 ай бұрын

Ed25519 doesn’t care but don’t upset ED-209!

@mrmotofy 5 ай бұрын

I've seen so many commercials when I hear ED, I only think of...commercials and blue pills haha

@GeordiLaForgery 5 ай бұрын

@@ironfist7789 "going default" I like that.

@GeordiLaForgery 5 ай бұрын

@@randomgeocacher sometimes 209 has minor glitches!

@quillonri 5 ай бұрын

Clever intro! ;)

@jonathansnow1886 5 ай бұрын

Very cool.

@thomaschung1781 5 ай бұрын

I needed to keep RSA keys around because AWS EC2 didn't support ed25519 keys. I just checked again, and it turns out they added support for it 2 years ago. I can now use ed25519 keys for all my use cases

@JoaoCarlos-df1zw 5 ай бұрын

Oh, cool background!

@bwcbiz 5 ай бұрын

Remember that SSH is the underpinning for SFTP, which is used by a few other user classes besides system admins and devops.

@kittybeans8192 5 ай бұрын

2:13 I saw that, and I will be checking it out. :3

@Maverick_Mad_Moiselle 2 ай бұрын

Fun fact. A week ago or so, I played a game called Scanner Sombre (awesome btw) which used a faulty OpenSSH feature code. Intel 10th+ generation CPUs apparently have a feature for better key generation and that faulty code caused the game to crash when attempting to use the CPU feature with it. Intel has posted an article about it "OpenSSL* SHA Crash Bug Requires Application Update." A game dev unrelated to this game has debugged the issue and made a tutorial to edit the executable to replace the OpenSSH commands by NOP and it fixed it. It was later found that just telling Windows not to use those features worked too, albeit not as fun. Perchance.

@masoudesmaeilian5083 4 ай бұрын

Thanks for sharing, can I know the name of the book that you put question mark or it just was a printed page from wikipedia? :) or if you know a book about these algorithms

@folha_seca5862 5 ай бұрын

Hi, Veronica. Sorry for making this comment here instead of on your video about quitting, but Id really like to see a video of how to get into cobol coding or the behind the scenes work you did. I did some research a while back, and your positive outlook on getting a job in that industry contrasted with the outlook I came across.

@bmacpher 5 ай бұрын

I'll have to retrain my muscle memory - been doing it long enough that ssh-keygen -t rsa -b 4096 is a cliche, from the days of default dss 🙂

@SB-qm5wg 5 ай бұрын

It can cause issues if you use older hardware appliances that you can't update and only support older keys/hashes. My work around is to update .ssh/config with PubkeyAcceptedKeyTypes & HostKeyAlgorithms stanzas

@stevepoling 5 ай бұрын

Nice boing-ball graphic you got there. Have you done any Amiga or AmigaDos videos?

@JessicaFEREM 5 ай бұрын

heck yea

@sergiosoares5045 5 ай бұрын

Great video o/

@MykDowling 4 ай бұрын

Manjaro seems to have changed the openssh config to create ed25519 by default a while ago. My ed25519 cert was created in August 2022! Either that, or I just decided to create a more secure cert pair. Any idea how far off OpenSSH moving to Quantum Safe encryption is?