Package: openssh-blacklist
Version: 0.1.0
Severity: normal

Hi folks,

there's a tarball of 32bit/le rsa 4096 key pairs at
<http://metasploit.com/users/hdm/tools/debian-openssl/>.

I'm trying to build a blacklist for these keys*. It would be
nice if one was included in the package.

[ * having some trouble. there are 32768 such keys, but the
    existing blacklist files are 3x as large. is this for other
    bit depths / endian? also, the ssh-vulnkey(1) manpage
    says lines must be 20 chars long and strip the first 12
    bytes, yet these blacklists are 38 chars long so
    presumably do not. ]


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-486
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

openssh-blacklist depends on no packages.

Versions of packages openssh-blacklist recommends:
ii  openssh-client                1:4.7p1-9  secure shell client, an rlogin/rsh

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to