▲ 3 ▼ forwarding port 22 safe? (alien.top) submitted 2 years ago by 1c34@alien.top [B] to c/main@selfhosted.forum 91 comments fedilink hide all child comments i want to remotely ssh to my home server, and I was wondering if I could just forward port 22 with disabling password login and use pubkey authentication will be safe enough?
[–] Beastmind@alien.top [B] 1 point 2 years ago (1 child) Also don't use rsa, use Ed25519 nowadays permalink fedilink source parent hideshow 2 child comments replies: [–] upofadown@alien.top [B] 1 point 2 years ago (3 children) RSA is fine. It isn't like you will have to worry about the length of the keys for SSH. permalink fedilink source parent hideshow 6 child comments replies: [–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago (1 child) Well it‘s true that one can use RSA, which is still save with keys big enough, but if someone wants so save some extra computing power and time ed25519 is the way to go. permalink fedilink source parent hideshow 2 child comments replies: [–] dumbasPL@alien.top [B] 1 point 2 years ago (1 child) The difference is extremely tiny because asymmetric encryption is only used at the very beginning to securely establish a symmetric key that will be used for everything else afterwards. So you would have to be running this on a smart fridge to notice the speed difference. permalink fedilink source parent hideshow 2 child comments replies: [–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago True enough permalink fedilink source parent [–] GolemancerVekk@alien.top [B] 1 point 2 years ago (1 child) https://arstechnica.com/security/2023/11/hackers-can-steal-ssh-cryptographic-keys-in-new-cutting-edge-attack/ permalink fedilink source parent hideshow 2 child comments replies: [–] upofadown@alien.top [B] 1 point 2 years ago Requires an actual hardware error. Almost all implementations, including all open source SSH implementations, check that the signature is valid thus preventing a cosmic ray induced bit flip from triggering this issue and any related issue. What effect do hardware errors have on Ed25519? permalink fedilink source parent [–] Beastmind@alien.top [B] 1 point 2 years ago It is but if you're going to use something security related, use the current recommendation unless you stricly can't for legacy reason or something. permalink fedilink source parent
[–] upofadown@alien.top [B] 1 point 2 years ago (3 children) RSA is fine. It isn't like you will have to worry about the length of the keys for SSH. permalink fedilink source parent hideshow 6 child comments replies: [–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago (1 child) Well it‘s true that one can use RSA, which is still save with keys big enough, but if someone wants so save some extra computing power and time ed25519 is the way to go. permalink fedilink source parent hideshow 2 child comments replies: [–] dumbasPL@alien.top [B] 1 point 2 years ago (1 child) The difference is extremely tiny because asymmetric encryption is only used at the very beginning to securely establish a symmetric key that will be used for everything else afterwards. So you would have to be running this on a smart fridge to notice the speed difference. permalink fedilink source parent hideshow 2 child comments replies: [–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago True enough permalink fedilink source parent [–] GolemancerVekk@alien.top [B] 1 point 2 years ago (1 child) https://arstechnica.com/security/2023/11/hackers-can-steal-ssh-cryptographic-keys-in-new-cutting-edge-attack/ permalink fedilink source parent hideshow 2 child comments replies: [–] upofadown@alien.top [B] 1 point 2 years ago Requires an actual hardware error. Almost all implementations, including all open source SSH implementations, check that the signature is valid thus preventing a cosmic ray induced bit flip from triggering this issue and any related issue. What effect do hardware errors have on Ed25519? permalink fedilink source parent [–] Beastmind@alien.top [B] 1 point 2 years ago It is but if you're going to use something security related, use the current recommendation unless you stricly can't for legacy reason or something. permalink fedilink source parent
[–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago (1 child) Well it‘s true that one can use RSA, which is still save with keys big enough, but if someone wants so save some extra computing power and time ed25519 is the way to go. permalink fedilink source parent hideshow 2 child comments replies: [–] dumbasPL@alien.top [B] 1 point 2 years ago (1 child) The difference is extremely tiny because asymmetric encryption is only used at the very beginning to securely establish a symmetric key that will be used for everything else afterwards. So you would have to be running this on a smart fridge to notice the speed difference. permalink fedilink source parent hideshow 2 child comments replies: [–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago True enough permalink fedilink source parent
[–] dumbasPL@alien.top [B] 1 point 2 years ago (1 child) The difference is extremely tiny because asymmetric encryption is only used at the very beginning to securely establish a symmetric key that will be used for everything else afterwards. So you would have to be running this on a smart fridge to notice the speed difference. permalink fedilink source parent hideshow 2 child comments replies: [–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago True enough permalink fedilink source parent
[–] mr_whats_it_to_you@alien.top [B] 1 point 2 years ago True enough permalink fedilink source parent
[–] GolemancerVekk@alien.top [B] 1 point 2 years ago (1 child) https://arstechnica.com/security/2023/11/hackers-can-steal-ssh-cryptographic-keys-in-new-cutting-edge-attack/ permalink fedilink source parent hideshow 2 child comments replies: [–] upofadown@alien.top [B] 1 point 2 years ago Requires an actual hardware error. Almost all implementations, including all open source SSH implementations, check that the signature is valid thus preventing a cosmic ray induced bit flip from triggering this issue and any related issue. What effect do hardware errors have on Ed25519? permalink fedilink source parent
[–] upofadown@alien.top [B] 1 point 2 years ago Requires an actual hardware error. Almost all implementations, including all open source SSH implementations, check that the signature is valid thus preventing a cosmic ray induced bit flip from triggering this issue and any related issue. What effect do hardware errors have on Ed25519? permalink fedilink source parent
[–] Beastmind@alien.top [B] 1 point 2 years ago It is but if you're going to use something security related, use the current recommendation unless you stricly can't for legacy reason or something. permalink fedilink source parent