PowerShell / PowerShell/Win32-OpenSSH

ssh-keygen -Y sign didn't produce correct signature.

Open
#2,300 0 comments 5 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Area-ssh-keygen Investigate
Dominant language
No language data
Stars
8.3k
Forks
819
PR merge metrics
No merged PRs in 30d

Description

Prerequisites
  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.
Steps to reproduce

Creating new ed25519 key pair: ssh-keygen -t ed25519 -f test
Signing with some random text: ssh-keygen -Y sign -f test -n file test.txt
After putting test.pub to .ssh/allowed_signer , verify signature: type test.txt|ssh-keygen -Y verify -f .\.ssh\allowed_signer -n file -I t2 -s test.txt.sig
Got wrong signature:

Signature verification failed: incorrect signature
Could not verify signature.
Expected behavior
Should verify this signature
Actual behavior
got wrong signature.
Error details

No response

Environment data
Name                           Value
----                           -----
PSVersion                      5.1.22621.4249
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.22621.4249
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
Version

OpenSSH_for_Windows_9.5p1, LibreSSL 3.8.2

Visuals

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the issue with the listed ssh-keygen sign and verify commands in the provided PowerShell environment, using OpenSSH_for_Windows_9.5p1. Trace the signing and verification entry points for Ed25519 signatures. Done means the generated signature verifies successfully with the shown allowed_signer setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
cryptography, operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.