5

I want to generate rsa-sha2-256 ssh key pair using ssh-keygen utility. Can you please share the command for the same?

For ssh-rsa, it's ssh-keygen -t rsa

2 Answers2

10

You can use the command:

$ ssh-keygen -t rsa-sha2-256 -b 2048

PS: Maybe you need to upgrade Openssh version.

Neal
  • 101
6

As I understand it there is no such thing.

Specifically my understanding is that there is a distinction between key types and signature types. The "ssh-rsa" key type is used by the "ssh-rsa", "rsa-sha2-256" and "rsa-sha2-512" signature types.

The ssh-rsa signature type is being deprecated, because of security concerns surrounding sha1. However the ssh-rsa key type is still just fine, as long as the key length is sufficient.

plugwash
  • 6,719