The use of ed25519 is disabled via HostKeyAlgorithms in FIPS crypto policy.

[adelton]

Description:

• No need to control the use of keys based on key filenames.

Rationale:

• The use of ed25519 is disabled via HostKeyAlgorithms in FIPS crypto policy.

[matejak]

I see that it is disabled for gnutls in the crypto policy, but what indicates that it is disabled for SSH?

[adelton]

# sed 's/ /\n/g' /usr/share/crypto-policies/FIPS/opensshserver.txt | grep HostKeyAlgorithms | wc -l
1
# sed 's/ /\n/g' /usr/share/crypto-policies/FIPS/opensshserver.txt | grep ed25519 | wc -l
0

Comparing to /usr/share/crypto-policies/DEFAULT/opensshserver.txt, the ed25519 is missing.

[matejak]

OK, I can confirm that. Thank you for the PR!