Podcast
Root Causes 100: OpenSSH Deprecates SHA-1


Hosted by
Tim Callan
Chief Compliance Officer
Jason Soroko
Fellow
Original broadcast date
June 15, 2020
Once widely used, SHA-1 is considered insecure today and has been deprecated from the most common PKI use cases. OpenSSH recently provided a roadmap to its eventual deprecation of SHA-1. Join our hosts as they discuss the long, complex process of sunsetting a widely used cryptographic practice, the factors that contribute to these practices continuing beyond their secure lifespans, and the importance of crypto agility.
Podcast Transcript
Lightly edited for flow and brevity.
I guess the question I would ask is, is this scary though? That SHA-1 is still available for OpenSSH today?
So, what do we do? At the end of the day if these devices are out there and we feel like this protocol is not cryptographically secure do we just have to live with that for the lifetime of the devices?

