Re: [Cryptography-dev] ssh public key processing

2016-08-18 Thread Paul Kehrer
Hi Chris, I don't think we've tried to specifically bound it. In general the assumption has been that the keys it loads would be OpenSSH public keys in the form that you get from an "id_rsa.pub" file (for example). What do the options look like? Are they put into the line at the end as comments?

Re: [Cryptography-dev] ECDSA Interoperablity with Microsoft CNG-based peer

2016-08-18 Thread André Caron
Hi Paul, > Not at the moment. BN conversions are strictly in the bindings. Actually, if you look at my previous email, these two little helpers turned out to work fine for me: from cryptography.utils import ( int_from_bytes, int_to_bytes, ) > We'd like to eventually

Re: [Cryptography-dev] ssh public key processing

2016-08-18 Thread Chris Hines
Hi Paul, Options are specified in the sshd man page https://www.freebsd.org/cgi/man.cgi?sshd(8) Under the section Authorized Keys File Format. Technically options are not part of the public key (so are not covered by RFC4253) but are part of the OpenSSHD authorized_keys file format (which includ

Re: [Cryptography-dev] ssh public key processing

2016-08-18 Thread Ron Frederick
I’ve implemented all of this in AsyncSSH, and there I chose to break out the authorized_key parsing from public key parsing. More specifically, AsyncSSH provides the following functions for reading SSH public keys: import_public_key