RSA vs ECDSA vs ED25519

Great question. We still consider RSA 3072-bit and 4096-bit keys to be strong keys. The biggest downside though is that they're noticeably slow.

Why we left out ECDSA is because it doesn't provide additional benefits over Ed25519, other than legacy reasons, which are better covered by RSA.

With that said, we haven't fully ruled out ECDSA yet. This is still on the list, but not prioritized at the moment.

Please keep in mind that users have to deal with a vast amount of older systems and older keys that cannot be updated to use state of the art key types. It's even so that the security policy of your company may require to use for example "rsa 2048 bit" keys, and you must use these. Yes, company policy requires this, and this is immutable like one of the god given commandments. Everyone knows it's not state of the art any more, even the persons who wrote the policies, but a policy update needs years and the next one isn't planned yet.

With such keys, 1Password cannot be used, but in reality, such keys are being used.

So it's required for universal use for the agent to be useful to support every key algorithm and key length OpenSSH does support, even the unsecure ones. It's the user who decides to use some algorithm, it should not be the software that simply denies him to use one.

Former Member I agree with that assessment, which is exactly why we do support 2048-bit RSA keys, actually.