<div dir="ltr">I generated 8192-bit RSA host keys after I read this article:<div><a href="https://stribika.github.io/2015/01/04/secure-secure-shell.html">https://stribika.github.io/2015/01/04/secure-secure-shell.html</a><br></div><div><br></div><div>I believe OpenSSH's default is to generate a 2048-bit RSA host key, and that article recommends a 4096-bit key. This is just on my personal box, so I decided to go for broke with an 8192-bit key.</div><div><br></div><div>Thanks,</div><div><br></div><div>Stephen</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 9, 2015 at 6:55 AM, Matt Johnston <span dir="ltr"><<a href="mailto:matt@ucc.asn.au" target="_blank">matt@ucc.asn.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Stephen,<br>
<br>
Looks like a bug, I've only tested with 4096 bit keys.<br>
Probably just MAX_PRIVKEY_SIZE etc needs increasing in<br>
options.h, and some buffer sizes in keyimport.c<br>
<br>
Where did a 8192 bit key come from, out of interest?<br>
<br>
CHeers,<br>
Matt<br>
<div class="HOEnZb"><div class="h5"><br>
On Sun, Feb 08, 2015 at 09:08:17PM -0800, Stephen Kent wrote:<br>
> dropbearconvert seems to crash on large RSA key sizes (the host key<br>
> I'm trying to convert is 8192 bits):<br>
><br>
> $ openssl rsa -text -noout -in /etc/ssh/ssh_host_rsa_key 2>/dev/null | head -n 1<br>
> Private-Key: (8196 bit)<br>
> $ dropbearconvert openssh dropbear "/etc/ssh/ssh_host_rsa_key"<br>
> "./dropbear_rsa_host_key"<br>
> Exited: Bad buf_getwriteptr<br>
><br>
> dropbearconvert works fine on OpenSSH's default 2048-bit RSA host key.<br>
><br>
> Is this a bug? If so, is this the proper place to report it or is<br>
> there another procedure I should follow?<br>
><br>
> (Please CC me on replies as I am not on this list.)<br>
><br>
> Thanks,<br>
><br>
> Stephen<br>
</div></div></blockquote></div><br></div>