SSH keypair generation: RSA or DSA?

RSA is generally preferred (now that the patent issue is over with) because it can go up to 4096 bits, where DSA has to be exactly 1024 bits (in the opinion of ssh-keygen). 2048 bits is ssh-keygen‘s default length for RSA keys, and I don’t see any particular reason to use shorter ones. (The minimum possible is 768 bits; whether that’s “acceptable” is situational, I suppose.)

Related Posts:

  1. Simplest two-way encryption using PHP
  2. Why does WordPress need my private ssh key to update?
  3. How to disable XML-RPC from Linux command-line in a total way?
  4. Possible to change email address in keypair?
  5. How to check if an RSA public / private key pair match
  6. Why is SSH password authentication a security risk?
  7. What is the difference between a cer, pvk, and pfx file?
  8. How to solve “Kernel panic – not syncing – Attempted to kill init” — without erasing any user data
  9. Is it possible to decrypt SHA1
  10. Encrypt Password in Configuration Files?
  11. Error `sec_error_revoked_certificate` when viewed in Firefox only
  12. Convert .pfx to .cer
  13. Why should I use the esc_url?
  14. Where to securely store API keys and passwords in WordPress?
  15. Why escape if the_content isnt?
  16. Full path disclosure on rss-functions.php
  17. What to use instead of wp_kses() in user output
  18. Are the default salts secure?
  19. is_email() VS sanitize_email()
  20. Subscribe to email for security fixes?
  21. How to escape custom css?
  22. Understanding SVG vulnerabilities in WordPress related to a specific fix
  23. Moving wp-config.php: Can this be done after site launch?
  24. How to secure or disable the RSS feeds?
  25. Make password invalid once logged out of password-protected page
  26. How to get WordPress to save upload file beyond web root [closed]
  27. Is security a problem in WordPress?
  28. Moving wordpress out of the public directory
  29. Logout via Subdomain, non-wordpress page on a different server?
  30. Protecting HTML5 video [closed]
  31. How can I tell who changed the password?
  32. WordPress website Security [closed]
  33. Do I need to use the esc_html() function on hard coded links?
  34. Can’t reset WordPress password
  35. Is the “lost password” feature truly a vulnerability?
  36. Frontend Password change
  37. Is it possible to reduce the minimum character length for passwords?
  38. Handling email piping attachments and detecting unsupported file types
  39. Downloading File from Outside Web Root
  40. site get login attempts after htaccess ip restriction
  41. Is it good security advice to install wordpress in subdirectory but link to root?
  42. Why was my blog post inserted lot’s of ad links by others?
  43. Moving wp-config.php up 2 levels
  44. How Could I sanitize the receive data from this code
  45. WordPress SQL Injections through User Agent
  46. Should I Worry About SQL Injection When Using wp_insert_post?
  47. Is there a way for a user to have an alias?
  48. How to prevent wp-login brute force attack from thousand of different IP? [duplicate]
  49. What permissions should I give directories if I want to make WordPress more secure?
  50. Security threat with `home_url`?
  51. When is wp_set_password() called or how to capture a password
  52. How to protect wp-admin through .htaccess?
  53. Something is unescaping all html entities before output to browser [closed]
  54. Frequently getting attacks on admin-ajax.php, wp-cron.php, xmlrpc.php and wp-login.php
  55. How to get WordPress to send Password Reset Link Email instead of New Password?
  56. Verifying that I have fully removed a WordPress hack?
  57. Large Session Tokens
  58. How to change permissions of WordPress and/or apache on macOS securely?
  59. Using an Encryption class in a WordPress Plugin
  60. Limit Login Attempts BEFORE PHP is executed?
  61. Safe to say WordPress security releases don’t have database upgrades
  62. Config file with no Keys..?
  63. How much should I worry about these messages?
  64. Security concerns with external links
  65. Uploading .webm format on WordPress results in security guidline breach and fail
  66. fail2ban to prevent Brute Force Attacks on WordPress?
  67. .htaccess password protection bypassed
  68. Session Cookie security questions
  69. How to give the same error message when the wrong password or wrong username is used?
  70. Storing FTP details in wp-config.php
  71. Spam injected in w3 total cache page cache [closed]
  72. How to distinguish between a hack and an encoding error?
  73. Prevent editor from adding script or form
  74. How to change location of wp-config.php to folder or 2 folders up?
  75. How might I sanitize an XML file before WP Import? (Does wordpress verify or clean text when importing from an XML document? )
  76. Finding where a snippet of code is coming from
  77. Remove hacked code – out of ideas! [closed]
  78. Secure Server after configuration
  79. After limiting the access to my wp-login.php by IP through .htaccess, all my password-protected posts stopped working. What’s the best solution now?
  80. Block JSON access over the net
  81. Can someone do something to my website if I posted a snapped image of the header and covered my logo? (On reddit, when explaining a question)
  82. The in-famous Unable to locate WordPress Content directory (wp-content) and the Direct Method
  83. Security: Critical backend outside of wordpress
  84. Advice On How to Backup WordPress
  85. How to check whether a site has been compromised without browsing into it?
  86. My site thinks it’s secure when it is fact not
  87. Is it possible to only have the admin interface bind to the local loopback?
  88. Should I change the default file and folder permissions?
  89. WordPress exploited theme is causing high io load on server
  90. How to rewrite rules for WP-security in Nginx?
  91. How to set custom validation for WordPress Passwords?
  92. Is it a bad idea to CHMOD 777 all the files on your site?
  93. How to stop repeated hack on header.php of custom theme? [closed]
  94. Default installation permissions for wp-config.php
  95. Correct setup to block file modifications from hackers
  96. How do I tell Git for Windows where to find my private RSA key?
  97. How do you search for backdoors from the previous IT person?
  98. “POSSIBLE BREAK-IN ATTEMPT!” in /var/log/secure — what does this mean?
  99. Is wp-cron.php vulnerable to external attacks and how to protect it?
  100. How to address security vulnerabilities: LUCKY13, BEAST, and BREACH

Leave a Comment