The ssh-keygen -o flag wasn't listed in the synopsis, and -a was only listed with -T (where it specifies the number of primality tests), not for specifying the number of KDF rounds of new-format private key files.
I only tested creating a new private key and conversion of existing keys with -p. I didn't test usage with -i, but I'm assuming that -o and -a would also apply there. OK? Thanks, Jeremy Index: ssh-keygen.1 =================================================================== RCS file: /cvs/src/usr.bin/ssh/ssh-keygen.1,v retrieving revision 1.147 diff -u -p -r1.147 ssh-keygen.1 --- ssh-keygen.1 12 Mar 2018 00:52:01 -0000 1.147 +++ ssh-keygen.1 4 Aug 2018 04:20:08 -0000 @@ -44,7 +44,8 @@ .Sh SYNOPSIS .Bk -words .Nm ssh-keygen -.Op Fl q +.Op Fl oq +.Op Fl a Ar rounds .Op Fl b Ar bits .Op Fl t Cm dsa | ecdsa | ed25519 | rsa .Op Fl N Ar new_passphrase @@ -52,11 +53,15 @@ .Op Fl f Ar output_keyfile .Nm ssh-keygen .Fl p +.Op Fl o +.Op Fl a Ar rounds .Op Fl P Ar old_passphrase .Op Fl N Ar new_passphrase .Op Fl f Ar keyfile .Nm ssh-keygen .Fl i +.Op Fl o +.Op Fl a Ar rounds .Op Fl m Ar key_format .Op Fl f Ar input_keyfile .Nm ssh-keygen
