DEV Community

Discussion on: How to generate a secure SSH key pair?

Collapse
 
jimzandueta profile image
Jim Zandueta

Hi @ccoveille! Thank you for your suggestions. Yes, that is correct! ECDSA is now preferred over RSA because of its shorter key lengths and faster performance. Over the last decade, ECDSA has also been widely adopted. Perhaps we'll use it on my next project. However, for the time being, RSA, specifically with bit length 4096, continues to work for us. Cheers!

Collapse
 
ccoveille profile image
Christophe Colombier

Ok, I'm using ED25519 for more than a year now, but it's not widely adopted.

Thread Thread
 
jimzandueta profile image
Jim Zandueta

That’s good to know. I read somewhere that NIST (National Institute of Standards and Technology) speculates that RSA 2048 will be safe to use until 2030 (maybe +10 years for RSA 4096). By that time, we’ll probably see more ECDSA adoption. But yes using ECDSA today is future-proofing your systems security.

Thread Thread
 
ccoveille profile image
Christophe Colombier

ED25519 is not exactly EDDSA, but I agree with you.

Thread Thread
 
jimzandueta profile image
Jim Zandueta

Oh my bad. I was thinking that ED25519 was a type of ECDSA instead of ECC. 😅