@@ -152,15 +152,15 @@ $ ssh-keygen -t ed25519 -a 100 -f ~/.ssh/id_{{ site.workshop_host }}_ed25519
152
152
```
153
153
{: .language-bash}
154
154
155
- * ` -o ` (no default): use the OpenSSH key format,
155
+ - ` -o ` (no default): use the OpenSSH key format,
156
156
rather than PEM.
157
- * ` -a ` (default is 16): number of rounds of passphrase derivation;
157
+ - ` -a ` (default is 16): number of rounds of passphrase derivation;
158
158
increase to slow down brute force attacks.
159
- * ` -t ` (default is [ rsa] ( https://en.wikipedia.org/wiki/RSA_(cryptosystem) ) ):
159
+ - ` -t ` (default is [ rsa] ( https://en.wikipedia.org/wiki/RSA_(cryptosystem) ) ):
160
160
specify the "type" or cryptographic algorithm.
161
161
[ ed25519] ( https://en.wikipedia.org/wiki/EdDSA )
162
162
is faster and shorter than RSA for comparable strength.
163
- * ` -f ` (default is /home/user/.ssh/id_algo ): filename to store your keys.
163
+ - ` -f ` (default is /home/user/.ssh/id_algorithm ): filename to store your keys.
164
164
If you already have SSH keys, make sure you specify a different name:
165
165
` ssh-keygen ` will overwrite the default key if you don't specify!
166
166
@@ -177,6 +177,8 @@ The flag `-b` sets the number of bits in the key.
177
177
The default is 2048. EdDSA uses a fixed key length,
178
178
so this flag would have no effect.
179
179
180
+ > #### Further information
181
+ >
180
182
> For more information on SSH security and some of the
181
183
> flags set here, an excellent resource is
182
184
> [ Secure Secure Shell] ( https://stribika.github.io/2015/01/04/secure-secure-shell.html ) .
@@ -193,7 +195,7 @@ the public key (`~/.ssh/key_{{ site.workshop_host }}_ed25519.pub` or
193
195
requested by the system administrators, the * public* key is the one
194
196
to provide.
195
197
196
- > ## Private keys are your private identity
198
+ > ##### Private keys are your private identity
197
199
>
198
200
> A private key that is visible to anyone but you should be considered compromised,
199
201
> and must be destroyed. This includes having improper permissions on the directory
0 commit comments