Date: Thu, 20 Feb 2014 01:27:59 +0400 From: Ruslan Makhmatkhanov <cvs-src@yandex.ru> To: Benjamin Kaduk <bjk@freebsd.org> Cc: FreeBSD Current <freebsd-current@freebsd.org> Subject: Re: ssh-keygen -Z Message-ID: <530521DF.4010205@yandex.ru> In-Reply-To: <alpine.GSO.1.10.1402162348050.1213@multics.mit.edu> References: <53008ECD.2070004@yandex.ru> <alpine.GSO.1.10.1402162348050.1213@multics.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Benjamin Kaduk wrote on 17.02.2014 08:56: > On Sun, 16 Feb 2014, Ruslan Makhmatkhanov wrote: > >> Hello, >> >> there is -Z parameter in ssh-keygen --help output, but no mention of >> it in ssh-keygen's man-page. Any clue what values this parameter accept? > > It is the "new-format ciphername", which can be used for RSA keys if the > new format file is being used, and is used for the elliptic curve keys, > if I'm reading things correctly. I guess that would mean that it accepts > things like "chacha20-poly1305@openssh.com" and "aes256-ctr" (see the > table ciphers[] in cipher.c), though I don't know which ones make sense > to pass in there. > > I guess we should ask the OpenBSD folks to document it, the -Z argument > was added to ssh-keygen.c in r1.237 back in December. > > -Ben Thank you for description! -- Regards, Ruslan T.O.S. Of Reality
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?530521DF.4010205>