

The default key size depends on your version of ssh-keygen. Recommends a key size of at least 2048 bits. If you use an RSA key, the US National Institute of Science and Technology in RSA SSH keysĪvailable documentation suggests ED25519 is more secure than RSA. Must have OpenSSH 8.2 or later installed. To use ECDSA_SK SSH keys on GitLab, your local client and GitLab server OpenSSH 6.5 introduced ED25519 SSH keys in 2014, and they should be available on most Suggests that ED25519 keys are more secure and performant than RSA keys. ECDSA (As noted in Practical Cryptography With Go, the security issues related to DSA also apply to ECDSA.)Īdministrators can restrict which keys are permitted and their minimum lengths.

ECDSA_SK (Available in GitLab 14.8 and later.).ED25519_SK (Available in GitLab 14.8 and later.).To communicate with GitLab, you can use the following SSH key types: To view the version of SSH installed on your system, run ssh -V. Earlier versions used an MD5 signature, which is not secure.


Use different keys for different repositories.Generate an SSH key pair for a FIDO/U2F hardware security key.Upgrade your RSA key pair to a more secure format.Configure SSH to point to a different directory.See if you have an existing SSH key pair.
