新浪网

OpenSSH 8.2 发布 禁用 ssh-rsa 算法

OpenSSH 8.2 发布了。OpenSSH 是 100％ 完整的 SSH 协议 2.0 版本的实现，并且包括 sftp 客户端和服务器支持。此版本变化不少，其中有两个地方值得特别关注。一个是新特性，此版本增加了对 FIDO/U2F 硬件身份验证器的支持。 FIDO/U2F 是廉价硬件双因认证的开放标准，广泛 ...
中关村在线

远程攻略：SecureCRT使用RSA密钥登陆SSH

一直在SecureCRT上使用密码和键盘交互方式登陆ssh，一直没试成功，今天无意在一篇文章里受了点启发，顺便就在前些天装的虚拟机上试成了。客户端用的SecureCRT5.5.1，服务端为openSUSE10.3上默认安装的OpenSSH_4.6p1。 首先配置SecureCRT上的RSA密钥，打开SecureCRT→Quick ...
ZDNet

OpenSSH to deprecate SHA-1 logins due to security risk

OpenSSH, the most popular utility for connecting to and managing remote servers, has announced today plans to drop support for its SHA-1 authentication scheme. The OpenSSH team cited security concerns ...
Bleeping Computer

Researchers extract RSA keys from SSH server signing errors

A team of academic researchers from universities in California and Massachusetts demonstrated that it’s possible under certain conditions for passive network attackers to retrieve secret RSA keys from ...