What this page contains
Each category is one SSH key pair generated by the CH-J Tools Key Generator, covering every key type it offers: the legacy SSH-1 RSA and DSA keys kept only for history, the classic RSA, ECDSA and Ed25519 keys used on servers today, and the post-quantum ML-DSA-44 + Ed25519 composite. Every key that can sign files also signed the same test file with ssh-keygen-compatible SSH signatures (SSHSIG, namespace "file").
Test keys only
These keys are synthetic and their private keys are published unencrypted on purpose. Never add them to authorized_keys on a real server and never trust a signature only because it verifies with one of these keys.
How the keys were checked
All signatures verify in CH-J Tools and reject a modified file. Independently, OpenSSH 10.5 verified the RSA, ECDSA and Ed25519 signatures, OpenSSH 9.6 the DSA signature, and OpenSSH 10.6p2 the ML-DSA-44 + Ed25519 signature; fingerprints matched ssh-keygen -l. SSH-1 has no signature format for files.
Test file
The signatures cover the same 1 MB test file as the OpenPGP key examples; it is stored on the website only once.
Categories
Legacy (historical only)
- Example 01 · SSH-1 RSA 1024 (legacy)
MD5:37:b3:13:4e:c5:75:9d:1f:29:80:9e:2d:30:20:ac:77 - Example 02 · DSA 1024 (legacy)
SHA256:M9O86Fg5WN5CtyPJXkcxQxMTP4Do2wbV6DDk9fWOQDc
Classic key types
- Example 03 · RSA 2048
SHA256:PRraUEAOnitXGs/jNcwuT0k+04aW793ywqkTFmFmY5g - Example 04 · RSA 3072
SHA256:HS3S7ghNmNJ8H0+gMwQBxkihRgCChGVIS8mYRsy0K7g - Example 05 · RSA 4096
SHA256:r87pfWBR4SuuEEn1C+YC0c+mntL4rZT3QGXF/+mD6jg - Example 06 · ECDSA NIST P-256
SHA256:c3RQHg8rtGbll5HRD5n/fzzG/emQj8j3ocJkFg9cBFk - Example 07 · ECDSA NIST P-384
SHA256:hYwdECb28DMD8ZsUYHqXkOjKOFEOt8B7trFtHW5Pe30 - Example 08 · ECDSA NIST P-521
SHA256:gOAde61s56TDk0j8joq3B2AjzsQ+qcAZIuDJ49BMBMk - Example 09 · Ed25519
SHA256:OkqKmqArU8SoYzSvX7KIZ1F8XdO/FSxFspCrbszALjE
Post-quantum (OpenSSH 10.6 and newer)
- Example 10 · ML-DSA-44 + Ed25519
SHA256:k6pGTaZwJTckCcXNezP/s7/0qVMDExdO2IccXqT+b1c