mbox series

[0/2] Enable OpenSSH hybrid post-quantum host keys

Message ID 20261011174305.2610435-1-ayoub.zaki@embetrix.com
Headers show
Series Enable OpenSSH hybrid post-quantum host keys | expand

Message

Ayoub Zaki Oct. 11, 2026, 5:43 p.m. UTC 
OpenSSH 10.6 enabled hybrid ML-DSA-44/Ed25519 signatures. This series
enables this host key type by default beside ECDSA and adds a pregenerated
key for QEMU tests.

Tested on qemux86-64 with SSH connections to localhost using both ECDSA
and explicitly selected ML-DSA-44/Ed25519 host keys.

Ayoub Zaki (2):
  ssh-pregen-hostkeys: add ML-DSA-44/Ed25519 host key
  openssh: enable ML-DSA-44/Ed25519 host keys by default

 .../openssh/openssh/sshd_check_keys           |  5 ++
 .../openssh/openssh/sshd_config               |  1 +
 .../openssh/openssh_10.6p1.bb                 |  9 ++-
 .../openssh/ssh_host_mldsa44_ed25519_key      | 58 +++++++++++++++++++
 .../openssh/ssh_host_mldsa44_ed25519_key.pub  |  1 +
 5 files changed, 73 insertions(+), 1 deletion(-)
 create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_mldsa44_ed25519_key
 create mode 100644 meta/recipes-connectivity/ssh-pregen-hostkeys/ssh-pregen-hostkeys/openssh/ssh_host_mldsa44_ed25519_key.pub