[mac913]

I've been updating my Router's old SSH RSA 2048 Keys to the Ed25519 with PuTTYgen Release 0.76. My old Android SSH App don't support Ed25519 Keys. I just want to know which Android SSH App are people on the forum are using that are up to date secure and support Port Forwarding and Ed25519 Keys in PuTTY.

TIA!

Edited Title...

[dale_gribble39]

https://proprivacy.com/guides/ssh-android-setup-guide

[egc]

You can still use your old RSA keys if you want.

[mac913]

[ho1Aetoo]

I use juiceSSH

[mac913]

[ho1Aetoo]

Putty uses its own format.
But you can convert the keys to the OpenSSH format

you can also generate the keys in the WebIF of the router and download them in OpenSSH format and then convert them in Putty

[dale_gribble39]

[mac913]

[ho1Aetoo]

Well, you can also use multiple keys.
In the router you only have to store several public keys.

On the end devices you can then use individual private keys.
E.g., created with dropbear / openssh / putty / whatever ...



By the way, it is safest if you don't store your private keys on any smartphone

[mac913]

[mac913]

[ho1Aetoo]

So I just created an Ed25519 key with password protection using OpenSSH.
The public key is stored on the router.

It works fine on my Linux PC.
Then I imported the private key into JuiceSSH.

There it also works fine

[mac913]

[mac913]

I have ConnectBot working with PuTTYgen Ed25519 Keys

You need to use 3 different formats for your newly created Ed25519 from PuTTYgen 0.76...

When you start PuTTYgen select EdDSA with Curve Ed25519 then Press Generate and move your mouse around to create the Key. Now enter your Key passphrase. Now we can create 2 different files and import the new key to your DD-WRT Router with at least Build 50906.

a) Your PuTTY software will need the file created from "Save private key" which is a ppk file.
Debian CLI Command (-C is optional): puttygen -t ed25519 -C "personal_comment" -o file_name.ppk

b) Now for your DD-WRT Router SSH Key, copy the key inside the box "Public key for pasting into OpenSSH..." You may want to back it up in a file. (I use wrt extension)
Debian CLI Command: puttygen file_name.ppk -O public-openssh -o file_name.wrt

c) Your ConnectBot App will need the file created from the top tab "Conversions" and "Export OpenSSH Key" there are 2 types they both work, pick either one. (I use ssh extension)
Debian CLI Command: puttygen file_name.ppk -O private-openssh -o file_name.ssh

If your Host ConnectBot doesn't connect, delete the Host and re-create it. This will reset the SshHostKey in the app.


UPDATE Testeing the Windows Putty 0.78 "ppk" keys in Putty 0.74 under Debian Bullseye "stable" states the key format is too new and doesn't work. I created new ed25519 keys with Debian Puttygen 0.74 using the commands in Bold and works with Putty 0.78 too.