Florian Eckert fe4bb13256 dropbear: enable ECDSA by default for backward compatibility ...

Enable ECDSA by default to:
- Support login with existing ECDSA keys.
- Ensure compatibility with legacy YubiKey devices (e.g., firmware 5.4)
  and PIV-based SSH keys (RSA/ECDSA only).
- Maintain access until Ed25519 adoption is widespread.

Default 'y' for all builds except those with SMALL_FLASH.
This activates:
- DROPBEAR_ECC_256 (via DROPBEAR_ECDH || DROPBEAR_ECDSA), enabling
  NIST-curve code for non-SMALL_FLASH builds.
- DROPBEAR_SK_ECDSA (default y), offering
  sk-ecdsa-sha2-nistp256@openssh.com by default.

Note: Increases only binary size for non-SMALL_FLASH targets.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Link: https://github.com/openwrt/openwrt/pull/24685
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

2026-09-06 19:31:30 +00:00

..

config

netifd: avoid pinning mt76 TX worker to NAPI CPU

2026-09-06 21:25:49 +02:00

ipv6

scripts: dhcp: option to override preferred Client ID per interface

2026-07-11 17:30:55 +02:00

services

dropbear: enable ECDSA by default for backward compatibility

2026-09-06 19:31:30 +00:00

utils

wireguard-tools: handle whitespace around list values

2026-08-15 11:16:06 +02:00