lists.mindrot.org

Hirom, 5 months ago to technology in Timeline to remove DSA support in OpenSSH

Finally! I wish OpenSSH also plan making RSA optional at build time, and set a timeline for removal shifted 1 or 2 years after DSA.

We are also likely to start exploring a post-quantum signature algorithm soon and are mindful of the overall size and complexity of the key/signature code.

That’s great news, if OpenSSH contributors commit to adding post-quantum cryptography, it’s bigger news than DSA removal.

jarfil, 5 months ago

The problem seems to be finding a post-quantum algorithm that doesn’t get obliterated by pre-quantum computers like what happened to SIKE:

m-cacm.acm.org/news/…/fulltext

Toes, 5 months ago to technology in Timeline to remove DSA support in OpenSSH

If anyone out there is still using DSA, they need to be punished for negligence.