Tobias DiPasquale on 27 May 2004 20:02:03 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] ssh keys: rsa vs dsa


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 27 May 2004 15:39, Jeff Abrahamson wrote:
| Thanks, Toby.
|
| Why do we generate DSA keys for ssh then?

For historical reasons. For years and years, RSA was under patent and was thus 
unimplementable in projects unwilling to pay royalties to RSADSI (e.g. 
OpenSSH). The patent expired, however, and so projects can now use the RSA 
algorithm which does not yield the generation of a second temporary 
transaction key for encryption as it does when using DSA. DSA (as an 
algorithm) is slower at signing/verifying than RSA anyway. DSA remains the 
default for SSH for historical reasons.

- -- 
Tobias DiPasquale
202A 04C4 2CE6 B985 8520  88D6 CD25 1A6C B9B5 1595
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAtkkkzSUabLm1FZURAuY1AKCSpkxtmo1+ZNAZKo8O01NKjVKuvwCbBdVv
3WQc4IQIjRwP5gpyIuv3LiE=
=IVsr
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug