[SSHD-440] Support Ed25519 keys and ed25519-sha-512 signature type

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.14.0
• Fix Version/s: 1.4.0
• Assignee: Lyor Goldstein
• Reporter: Ancoron Luciferis
• Created: 27/Mar/15 09:56
• Updated: 01/Feb/17 05:31
• Resolved: 11/Oct/16 15:01

Description

As an administrator of a production system running with Apache Karaf I want to secure the system as much as possible.

Based on the following article I would like to use the "curve25519-sha256" key exchange mechanism and Ed25519 keys for the SSH server and client:

• https://stribika.github.io/2015/01/04/secure-secure-shell.html

The probably most stable implementation in pure Java is currently residing in I2P:

• https://github.com/i2p/i2p.i2p/tree/master/core/java/src/net/i2p/crypto/eddsa

...although it seems to have originated at the following standalone library:

• https://github.com/str4d/ed25519-java

Issue Links

• is depended upon by: SSHD-710 Cannot connect standard OpenSSH client/server using ed25519 keys
• is depended upon by: SSHD-703 Add support for reading an ED25519 private key from a file
• is depended upon by: SSHD-704 Add support for [e-mail] key exchange
• is depended upon by: SSHD-707 Add support for writing OpenSSH ed25519 private keys to file
• is depended upon by: SSHD-708 Add support for password encrypted OpenSSH private key files
• is depended upon by: SSHD-727 Upgrade used EdDSA artifact version to 1.1
• relates to: SSHD-494 Convert ECCurves class into an enum