{"id":1234,"date":"2016-02-28T01:07:12","date_gmt":"2016-02-27T16:07:12","guid":{"rendered":"http:\/\/matoken.org\/blog\/?p=1234"},"modified":"2016-02-28T04:21:31","modified_gmt":"2016-02-27T19:21:31","slug":"add-ed25519-to-openssh-of-hostkey","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2016\/02\/28\/add-ed25519-to-openssh-of-hostkey\/","title":{"rendered":"OpenSSH\u306eHostKey\u306bED25519\u3092\u8ffd\u52a0"},"content":{"rendered":"<p><!--\nOpenSSH\u306eHostKey\u306bED25519\u3092\u8ffd\u52a0\n--><\/p>\n<p>\u3075\u3068\u3042\u308bhost\u306bED25519\u306e\u30b5\u30fc\u30d0\u9375\u304c\u306a\u3044\u306e\u306b\u6c17\u3065\u3044\u305f\u306e\u3067\u4f5c\u308a\u307e\u3057\u305f\uff0e<\/p>\n<p>\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u6307\u5b9a\u3057\u3066\u4f5c\u308b\u304b\uff0c<\/p>\n<pre class=\"editor-colors lang-text\"><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;sudo&nbsp;ssh-keygen&nbsp;-N&nbsp;&#39;&#39;&nbsp;-f&nbsp;\/etc\/ssh\/ssh_host_ed25519_key<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>Generating&nbsp;public\/private&nbsp;rsa&nbsp;key&nbsp;pair.<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>Your&nbsp;identification&nbsp;has&nbsp;been&nbsp;saved&nbsp;in&nbsp;.\/ssh_host_ed25519_key.<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>Your&nbsp;public&nbsp;key&nbsp;has&nbsp;been&nbsp;saved&nbsp;in&nbsp;.\/ssh_host_ed25519_key.pub.<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>The&nbsp;key&nbsp;fingerprint&nbsp;is:<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>f3:55:7f:02:04:92:c3:e0:4c:8c:7a:05:6a:00:28:da&nbsp;root@micro<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>The&nbsp;key&#39;s&nbsp;randomart&nbsp;image&nbsp;is:<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>+--[&nbsp;RSA&nbsp;2048]----+<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|=&nbsp;&nbsp;&nbsp;.+oo.....&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|o.&nbsp;..+o&nbsp;+.&nbsp;.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|o.o.&nbsp;.o&nbsp;&nbsp;.&nbsp;&nbsp;.&nbsp;.&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|..E&nbsp;.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o&nbsp;.&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;.&nbsp;&nbsp;&nbsp;&nbsp;S&nbsp;&nbsp;&nbsp;.&nbsp;.&nbsp;o|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;o&nbsp;.&nbsp;&nbsp;&nbsp;..|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>+-----------------+<\/span><\/span><\/span><\/div><\/pre>\n<p><code style=\"font-family: VL Gothic;\">ssh-keygen -A<\/code>\u3067\u8db3\u308a\u306a\u3044\u3082\u306e\u3092\u81ea\u52d5\u751f\u6210\u3057\u3066\u3082\u3089\u3044\u307e\u3059\uff0e<code style=\"font-family: VL Gothic;\">-A<\/code>\u306e\u5834\u5408\u9375\u6307\u7d0b\u304c\u51fa\u3066\u3053\u306a\u3044\u306e\u3067`ssh-keygen -lf\u3068\u304b\u3067\u78ba\u8a8d\u3057\u307e\u3057\u3087\u3046\uff0e<\/p>\n<pre class=\"editor-colors lang-text\"><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;sudo&nbsp;ssh-keygen&nbsp;-A<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>ssh-keygen:&nbsp;generating&nbsp;new&nbsp;host&nbsp;keys:&nbsp;ED25519<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;cat&nbsp;\/etc\/ssh\/ssh_host_ed25519_key.pub<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>ssh-ed25519&nbsp;AAAAC3NzaC1lZDI1NTE5AAAAINYCcWp86jHwcb56mvdFMpCjovBH8eAa99OufTUEYycU&nbsp;root@micro<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;ssh-keygen&nbsp;-lf&nbsp;\/etc\/ssh\/ssh_host_ed25519_key<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>256&nbsp;bf:f8:4a:5b:2d:da:72:84:e7:87:25:1b:9d:1c:56:b2&nbsp;&nbsp;root@micro&nbsp;(ED25519)<\/span><\/span><\/span><\/div><\/pre>\n<p>\u898f\u5b9a\u5024\u3067\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3068\u601d\u3046\u3051\u3069\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u3082\u8a18\u8ff0\u3057\u3066\u30c7\u30fc\u30e2\u30f3\u3092reload\uff0e<\/p>\n<pre class=\"editor-colors lang-text\"><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;grep&nbsp;ed25519&nbsp;\/etc\/ssh\/sshd_config<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>HostKey&nbsp;\/etc\/ssh\/ssh_host_ed25519_key<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;sudo&nbsp;service&nbsp;ssh&nbsp;restart<\/span><\/span><\/span><\/div><\/pre>\n<p>ed25519\u3067\u5e30\u3063\u3066\u304f\u308b\u304b\u78ba\u8a8d\uff0e<\/p>\n<pre class=\"editor-colors lang-text\"><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;ssh-keyscan&nbsp;-p&nbsp;2222&nbsp;-t&nbsp;ed25519&nbsp;localhost<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>#&nbsp;localhost&nbsp;SSH-2.0-OpenSSH_6.6.1p1&nbsp;Ubuntu-2ubuntu2.6<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>localhost&nbsp;ssh-ed25519&nbsp;AAAAC3NzaC1lZDI1NTE5AAAAINYCcWp86jHwcb56mvdFMpCjovBH8eAa99OufTUEYycU<\/span><\/span><\/span><\/div><\/pre>\n<p>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306eknown_hosts\u304b\u3089\u53e4\u3044\u3082\u306e\u3092\u6d88\u3057\u3066\u767b\u9332\u3057\u306a\u304a\u3057\u3066\uff0c<\/p>\n<pre class=\"editor-colors lang-text\"><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;ssh-keygen&nbsp;-f&nbsp;~\/.ssh\/known_hosts&nbsp;-R&nbsp;[192.168.1.102]:2222<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;ssh&nbsp;-o&nbsp;HostKeyAlgorithms=ssh-ed25519&nbsp;micro<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>The&nbsp;authenticity&nbsp;of&nbsp;host&nbsp;&#39;[192.168.1.102]:2222&nbsp;([192.168.1.102]:2222)&#39;&nbsp;can&#39;t&nbsp;be&nbsp;established.<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>ED25519&nbsp;key&nbsp;fingerprint&nbsp;is&nbsp;SHA256:H8TMbIG65XqBAeiST98ThJq\/Ux7RHerpMGXnxVJ7EjE.<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>+--[ED25519&nbsp;256]--+<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;.&nbsp;.&nbsp;&nbsp;&nbsp;..&nbsp;E.&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;.&nbsp;o&nbsp;.&nbsp;.=..o.&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;o&nbsp;o&nbsp;o&nbsp;o&nbsp;oB+&nbsp;o&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|o&nbsp;=&nbsp;&nbsp;&nbsp;=&nbsp;*o+&nbsp;=&nbsp;.&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;+&nbsp;o&nbsp;.&nbsp;%S+.o&nbsp;o&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;.&nbsp;o&nbsp;X&nbsp;=...&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+&nbsp;B&nbsp;..&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;o&nbsp;o&nbsp;o&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;.&nbsp;.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>+----[SHA256]-----+<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>Are&nbsp;you&nbsp;sure&nbsp;you&nbsp;want&nbsp;to&nbsp;continue&nbsp;connecting&nbsp;(yes\/no)?&nbsp;yes<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>Warning:&nbsp;Permanently&nbsp;added&nbsp;&#39;[192.168.1.102]:2222&#39;&nbsp;(ED25519)&nbsp;to&nbsp;the&nbsp;list&nbsp;of&nbsp;known&nbsp;hosts.<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span>&nbsp;<\/span><\/span><\/div><\/pre>\n<p>\u5f8c\u306fDNS\u306b\u767b\u9332\u3057\u305f\u308a\u2026\u2026\u3063\u3066ed25519\u306f\u30a8\u30e9\u30fc\u306b\u306a\u308b\u307f\u305f\u3044\u3067\u3059\u306d\uff0e<\/p>\n<pre class=\"editor-colors lang-text\"><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>$&nbsp;ssh-keygen&nbsp;-r&nbsp;example.org&nbsp;-f&nbsp;\/etc\/ssh\/ssh_host_ed25519_key<\/span><\/span><\/span><\/div><div class=\"line\"><span class=\"text plain\"><span class=\"meta paragraph text\"><span>export_dns_rr:&nbsp;unsupported&nbsp;algorithm&nbsp;and\/or&nbsp;digest_type<\/span><\/span><\/span><\/div><\/pre>\n<p>\u3061\u306a\u307f\u306bED25519\u306fOpenSSH 6.5p1\u3067\u5165\u308a\u307e\u3057\u305f\uff0e<\/p>\n<p><iframe src=\"http:\/\/rcm-fe.amazon-adsystem.com\/e\/cm?lt1=_top&amp;bc1=000000&amp;IS2=1&amp;bg1=FFFFFF&amp;fc1=000000&amp;lc1=0000FF&amp;t=matokensmeme-22&amp;o=9&amp;p=8&amp;l=as4&amp;m=amazon&amp;f=ifr&amp;ref=ss_til&amp;asins=4873112877\" style=\"width:120px;height:240px;\" scrolling=\"no\" marginwidth=\"0\" marginheight=\"0\" frameborder=\"0\"><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u3075\u3068\u3042\u308bhost\u306bED25519\u306e\u30b5\u30fc\u30d0\u9375\u304c\u306a\u3044\u306e\u306b\u6c17\u3065\u3044\u305f\u306e\u3067\u4f5c\u308a\u307e\u3057\u305f\uff0e \u30d5\u30a1\u30a4\u30eb\u540d\u3092\u6307\u5b9a\u3057\u3066\u4f5c\u308b\u304b\uff0c $&nbsp;sudo&nbsp;ssh-keygen&nbsp;-N&nbsp;&#39;&#39;&#038;nbsp [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"webmentions_disabled_pings":false,"webmentions_disabled":false,"activitypub_content_warning":"","activitypub_content_visibility":"","activitypub_max_image_attachments":4,"activitypub_interaction_policy_quote":"anyone","activitypub_status":"","footnotes":""},"categories":[6],"tags":[275,72],"class_list":["post-1234","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux","tag-openssh"],"_links":{"self":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/1234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/comments?post=1234"}],"version-history":[{"count":0,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/1234\/revisions"}],"wp:attachment":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/media?parent=1234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/categories?post=1234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/tags?post=1234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}