ssh-ed25519

The recommended modern SSH key type, built on the same Curve25519 family age uses. One ssh-ed25519 key can be an age recipient for encryption and an SSHSIG key for signing.

Definition

ssh-ed25519 is an OpenSSH key type using the Ed25519 signature scheme. Public keys begin with ssh-ed25519 AAAAC3NzaC1lZDI1NTE5….

What it is

Ed25519 keys are tiny (the public key is 32 bytes) and fast to use. OpenSSH recommends them over RSA for new keys. AgePony works with ssh-ed25519 keys for both encrypting (as an age recipient) and signing (via SSHSIG).

Why it matters

One key type covers your whole AgePony workflow. Publish your ssh-ed25519 public key once (on GitHub, a website, a business card) and people can both encrypt files to you and verify files you signed, all from the same key.

An ssh-ed25519 public key
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILxq...vQ9 you@example.com
In AgePony AgePony generates, imports, and uses ssh-ed25519 keys for encryption and signing. The same key you use for SSH logins can encrypt and sign files.

Related terms

Common questions

Can I reuse my login SSH key?

Technically yes, though many people prefer a dedicated key for file work. Both are ssh-ed25519.

How do I share it?

Publish the public key anywhere. GitHub serves it at github.com/username.keys.

Get AgePony

Free file encryption for iOS and Android. No accounts, no tracking, no servers.