{"id":9296,"date":"2026-10-23T09:09:04","date_gmt":"2026-10-23T08:09:04","guid":{"rendered":"https:\/\/workboot.fr\/ciela\/?page_id=9296"},"modified":"2026-10-23T09:33:10","modified_gmt":"2026-10-23T08:33:10","slug":"chiffrements-avec-ssh","status":"publish","type":"page","link":"https:\/\/workboot.fr\/ciela\/chiffrements-avec-ssh\/","title":{"rendered":"chiffrements avec ssh"},"content":{"rendered":"\n

on dispose actuellement de ces chiffrements :<\/p>\n\n\n\n

etudiant@ordi:~$ ssh-keygen -t\n dsa         ecdsa       ecdsa-sk    ed25519     ed25519-sk  rsa    <\/code><\/pre>\n\n\n\n
\ud83d\udd34 1. RSA 1024 bits \u2014 \u00c0 \u00c9VITER<\/h3>\n\n\n\n
    \n
  • S\u00e9curit\u00e9<\/strong> : ~80 bits (obsol\u00e8te, cassable)<\/li>\n\n\n\n
  • Statut<\/strong> : D\u00e9conseill\u00e9 depuis des ann\u00e9es, interdit dans la plupart des normes modernes (NIST, ANSSI)<\/li>\n\n\n\n
  • Usage<\/strong> : Aucun nouveau d\u00e9ploiement<\/li>\n<\/ul>\n\n\n\n
    <\/p>\n\n\n\n
    \ud83d\udfe0 2. RSA 2048 bits \u2014 MINIMUM TOL\u00c9R\u00c9<\/h3>\n\n\n\n
      \n
    • S\u00e9curit\u00e9<\/strong> : ~112 bits<\/li>\n\n\n\n
    • Statut<\/strong> : Encore accept\u00e9, mais consid\u00e9r\u00e9 comme le strict minimum<\/li>\n\n\n\n
    • Usage<\/strong> : Compatibilit\u00e9 avec syst\u00e8mes legacy uniquement<\/li>\n<\/ul>\n\n\n\n
      \ud83d\udfe1 3. RSA 3072\/4096 bits \u2014 ACCEPTABLE<\/h3>\n\n\n\n
        \n
      • S\u00e9curit\u00e9<\/strong> : ~128 bits (\u00e9quivalent Ed25519)<\/li>\n\n\n\n
      • Inconv\u00e9nients<\/strong> : Lent, cl\u00e9s et signatures volumineuses (384\u2013512 octets)<\/li>\n\n\n\n
      • Usage<\/strong> : Quand RSA est impos\u00e9 (r\u00e9glementation, legacy), ou pour le chiffrement<\/li>\n<\/ul>\n\n\n\n
        \ud83d\udfe2 4. Ed25519 \u2014 RECOMMAND\u00c9 (meilleur choix par d\u00e9faut)<\/h3>\n\n\n\n
          \n
        • S\u00e9curit\u00e9<\/strong> : ~128 bits<\/li>\n\n\n\n
        • Avantages<\/strong> :\n
            \n
          • Tr\u00e8s rapide (signature et v\u00e9rification)<\/li>\n\n\n\n
          • Cl\u00e9s compactes (32 octets) et signatures courtes (64 octets)<\/li>\n\n\n\n
          • Signatures d\u00e9terministes (pas de d\u00e9pendance au RNG)<\/li>\n\n\n\n
          • R\u00e9sistant aux attaques par canal auxiliaire<\/li>\n\n\n\n
          • Impl\u00e9mentations simples et s\u00fbres<\/li>\n<\/ul>\n<\/li>\n\n\n\n
          • Limite<\/strong> : signatures uniquement (pas de chiffrement), compatibilit\u00e9 plus r\u00e9cente<\/li>\n\n\n\n
          • Usage<\/strong> : Nouveaux projets, SSH, certificats modernes, IoT, embarqu\u00e9<\/li>\n<\/ul>\n\n\n\n
            \ud83d\udd35 5. Algorithmes post-quantiques (ML-DSA \/ SLH-DSA) \u2014 AVENIR<\/h3>\n\n\n\n
              \n
            • S\u00e9curit\u00e9<\/strong> : R\u00e9sistants aux ordinateurs quantiques<\/li>\n\n\n\n
            • Statut<\/strong> : Standardis\u00e9s par le NIST (2024), d\u00e9ploiement en cours<\/li>\n\n\n\n
            • Inconv\u00e9nients<\/strong> : Cl\u00e9s\/signatures plus grosses, jeunesse de l’\u00e9cosyst\u00e8me<\/li>\n\n\n\n
            • Usage<\/strong> : \u00c0 int\u00e9grer dans les feuilles de route de migration<\/li>\n<\/ul>\n\n\n\n
              \n\n\n\n
              R\u00e8gle simple<\/h2>\n\n\n\n
              Situation<\/th>Choix<\/th><\/tr><\/thead>
              Nouveau projet<\/td>Ed25519<\/strong><\/td><\/tr>
              Besoin de chiffrement<\/td>RSA 3072+<\/strong> (ou hybride avec courbe elliptique)<\/td><\/tr>
              Syst\u00e8me legacy<\/td>RSA 2048<\/strong> minimum<\/td><\/tr>
              Anticipation long terme<\/td>Pr\u00e9parer la migration post-quantique<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
              \u00c0 retenir : Ed25519 > RSA 3072 > RSA 2048 > RSA 1024.<\/strong> Et garder un \u0153il sur le post-quantique.<\/p>\n","protected":false},"excerpt":{"rendered":"
              on dispose actuellement de ces chiffrements : \ud83d\udd34 1. RSA 1024 bits \u2014 \u00c0 \u00c9VITER \ud83d\udfe0 2. RSA 2048 bits \u2014 MINIMUM TOL\u00c9R\u00c9 \ud83d\udfe1 3. RSA 3072\/4096 bits \u2014 ACCEPTABLE \ud83d\udfe2 4. Ed25519 \u2014 RECOMMAND\u00c9 (meilleur choix par d\u00e9faut) \ud83d\udd35 5. Algorithmes post-quantiques (ML-DSA \/ SLH-DSA) \u2014 AVENIR R\u00e8gle simple Situation Choix Nouveau projet Ed25519 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_uag_custom_page_level_css":"","footnotes":""},"class_list":["post-9296","page","type-page","status-publish","hentry"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"admin","author_link":"https:\/\/workboot.fr\/ciela\/author\/admin\/"},"uagb_comment_info":0,"uagb_excerpt":"on dispose actuellement de ces chiffrements : \ud83d\udd34 1. RSA 1024 bits \u2014 \u00c0 \u00c9VITER \ud83d\udfe0 2. RSA 2048 bits \u2014 MINIMUM TOL\u00c9R\u00c9 \ud83d\udfe1 3. RSA 3072\/4096 bits \u2014 ACCEPTABLE \ud83d\udfe2 4. Ed25519 \u2014 RECOMMAND\u00c9 (meilleur choix par d\u00e9faut) \ud83d\udd35 5. Algorithmes post-quantiques (ML-DSA \/ SLH-DSA) \u2014 AVENIR R\u00e8gle simple Situation Choix Nouveau projet Ed25519\u2026","_links":{"self":[{"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/pages\/9296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/comments?post=9296"}],"version-history":[{"count":3,"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/pages\/9296\/revisions"}],"predecessor-version":[{"id":9301,"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/pages\/9296\/revisions\/9301"}],"wp:attachment":[{"href":"https:\/\/workboot.fr\/ciela\/wp-json\/wp\/v2\/media?parent=9296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}