dropbear: Enable Ed25519 for normal devices
authorPaul Spooren <mail@aparcar.org>
Tue, 1 Sep 2020 19:13:28 +0000 (09:13 -1000)
committerHauke Mehrtens <hauke@hauke-m.de>
Sun, 6 Sep 2020 21:19:20 +0000 (23:19 +0200)
commitd0f295837a03f7f52000ae6d395827bdde7996a4
tree28786a383270e6cb6782d43fbdfcaad2902668b9
parent83e946d7183f6123fd8da492652a6aad1fb414fa
dropbear: Enable Ed25519 for normal devices

The Ed25519 key pairs are much shorter than RSA pairs and are supported
by default in OpenSSH. Looking at websites explaining how to create new
SSH keys, many suggest using Ed25519 rather than RSA, however consider
the former as not yet widely established. OpenWrt likely has a positive
influence on that development.

As enabling Ed25519 is a compile time option, it is currently not
possible to install the feature via `opkg` nor select that option in an
ImageBuilder.

Due to the size impact of **12kB** the option should only be enabled for
devices with `!SMALL_FLASH`.

This approach seems cleaner than splitting `dropbear` into two packages
like `dropbear` and `dropbear-ed25519`.

Signed-off-by: Paul Spooren <mail@aparcar.org>
package/network/services/dropbear/Config.in
package/network/services/dropbear/Makefile