Hacker News Reader

The keys themselves are not bound to sha1 or sha256. The hash is just used for the ephemeral signatures during authentication (or certificates as mentioned in the release notes). "ssh-rsa" signature scheme at runtime (sha1) will be deprecated, but rsa keys themselves are fine (edit typo name)

View on HN

Indeed, and so to actually use this $50k attack on SSH you'd need to somehow arrange for your target to pick random numbers you expected so that your attack works. But for clarity, OpenSSH isn't saying this can be used against SSH today - the deprecation is because we should abandon broken hashes before they actually cause us harm, not wait until after. Don't Walk Past.

People are still obviously using 1024 bit RSA keys which are more of a problem.

Right. Most SSH keys are just keys, not hashes. The hash used for key exchange during authentication is something that is enforced by the server (and client) and not a property of the key.

The option in ssh-keygen for a signature algorithm is for signing keys in an SSH CA. This is not something Github supports.

> This is not something Github supports.

actually, they do now[1], but only for enterprise accounts. Which is a shame - this is useful for "normal people" too.

1: https://help.github.com/en/github/setting-up-and-managing-or...

Reply on news.ycombinator.com