Is one more secure than开发者_运维百科 the other?
id_rsa.pub
and id_dsa.pub
are the public keys for id_rsa
and id_dsa
.
If you are asking in relation to SSH
, id_rsa
is an RSA key and can be used with the SSH protocol 1 or 2, whereas id_dsa
is a DSA key and can only be used with SSH protocol 2. Both are very secure, but DSA does seem to be the standard these days (assuming all your clients/servers support SSH 2).
Update: Since this was written DSA has been shown to be insecure. More information available in the answer below.
SSH uses public/private key pairs, so
id_rsa
is your RSA private key (based on prime numbers), which is more secure than your id_dsa
DSA private key (based on exponents). Keep your private keys safe and share your id_rsa.pub
and id_dsa.pub
public keys broadly.
DSA is insecure
DSA has a guessable parameter if your computer's random number generator is sub par, which will reveal your secret key. ECDSA (DSA's elliptical curve upgrade) is similarly vulnerable. Even with good random numbers, DSA has other strength concerns
/
精彩评论