Please don't use RSA or DSA [0]
[0] http://johnbokma.com/blog/2019/05/27/ssh-public-key-authenti...
[0] http://johnbokma.com/blog/2019/05/27/ssh-public-key-authenti...
Yubikey currently supports 4096 bit RSA keys as a part of GPG applet. There's a PIV module, however in terms of elliptic curves it only has ec256 and ec384 and I still can't get ssh and pkcs11 to pick up anything other than built-in 2048 RSA keys.