Bug 2446

Summary: Provide an option to show SHA256 fingerprints in a more pronouncable format
Product: Portable OpenSSH Reporter: Daniel Franke <dfoxfranke>
Component: ssh-keygenAssignee: Assigned to nobody <unassigned-bugs>
Status: CLOSED WONTFIX    
Severity: enhancement CC: djm
Priority: P5    
Version: 7.0p1   
Hardware: All   
OS: All   

Description Daniel Franke 2015-08-20 13:50:41 AEST
MD5 fingerprints of SSH keys are displayed as colon-separated hex strings, which is a convenient format for reading them over the phone. SHA256 fingerprints are displayed as base64, which is much more awkward because the reader has to specify whether every letter is upper or lower case, and the absence of grouping characters makes it easy to lose one's place while reading. Please provide a flag to display them in an alternative format such as hex, base32, or base36, broken into reasonable groups.
Comment 1 Damien Miller 2015-09-04 13:44:14 AEST
I don't want to add more options for fingerprints. If you're comparing fingerprints verbally, you can quite safely ignore the case.

Ignoring case loses at most 1 of 256 bits of uniqueness, so it's still very safe.
Comment 2 Damien Miller 2016-08-02 10:40:40 AEST
Close all resolved bugs after 7.3p1 release