Re: Updated RSA SHA-2 draft / New draft: SSH Extension Negotiation

[Jeffrey Hutzelman <jhutz%cmu.edu@localhost>]

On Sun, 2015-11-08 at 02:30 +0000, denis bider wrote:
> The "ecdsa-sha2-..." algorithm names (RFC 5656) do not use the "ssh-" prefix.
> 
> Neither do the new formats in RFC 6187, i.e. "x509v3-rsa2048-sha256" and "x509v3-ecdsa-sha2-...".
> 
> In my opinion, the "ssh-" prefix is superfluous. The context of SSH is
> implied by where the names are used.

It's superfluous except for "ssh-rsa" and "ssh-dsa", where it serves in
various out-of-protocol contexts to distinguish between these and the
corresponding SSHv1 key types.



> The prefix would make sense if it were needed to disambiguate from
> something. However, I am not aware of any proposal for SSH to do a
> wholesale import of algorithm names from some other, SSH-unaware spec.
> Moreover, if such names were imported, then THOSE names would be
> prefixed with something, not the SSH native algorithm names.

Right, agreed.