Nice to hear from you Mark! > I personally believe that using the @openssh.com extension is sufficient until final NIST candidate parameters are published. Okay, if that works, then that makes sense :)