@cadey you know what's annoying? this is a *valid* RSA PEM, but an invalid OpenSSH PEM (modulus MUST be at least 1024)

ssh-rsa AAAAB3NzaC1yc2EAAAABEQAAAAIMoQ== tiny@joke

-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAFgAAAAdzc2gtcn
NhAAAAAREAAAACDKEAAABAEzcTNxM3EzcAAAAHc3NoLXJzYQAAAAIMoQAAAAERAAAAAgrB AAAAASYAAAABPQAAAAE1AAAACXRpbnlAam9rZQ==
-----END OPENSSH PRIVATE KEY-----

@cadey

-----BEGIN RSA PRIVATE KEY----- MB0CAQACAgyhAgERAgIKwQIBPQIBNQIBNQIBMQIBJg==
-----END RSA PRIVATE KEY-----
-----BEGIN PUBLIC KEY----- MBswDQYJKoZIhvcNAQEBBQADCgAwBwICDKECARE=
-----END PUBLIC KEY-----
(p=61, q=53, n=3233, e=17, d=2753)

cc @soatok / @sophieschmieg

@cadey @soatok @sophieschmieg

damn, no luck with EC

-----BEGIN EC PRIVATE KEY-----
MDYCAQEEAQegJjAkAgEBMAwGByqGSM49AQECAREwBgQBAgQBAgQDBAUBAgETAgEB
oQYDBAAEAAY=
-----END EC PRIVATE KEY-----

group order 19, private key d=7, public point (0,6)

that's not valid on my fedora box's openssl (ASN yes, openssl no)

@risottobias @cadey @soatok yeah elliptic curves need to have a defined curve to be valid these days, and we don't make them this small.

@cadey -----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEznjUiKZrl439P4fFWqRFbPPzrMOW
Bw9+Cegk/rtsHzYjRnQ/FnE/IGq5YwZhGvEP1urMgG9Z6LwB98fOwbMYKw==
-----END PUBLIC KEY-----
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIPywhQJ88tHJ8+xU+XaI+UFXjIV3lsrLPDqhp1zVeFRRoAoGCCqGSM49
AwEHoUQDQgAEznjUiKZrl439P4fFWqRFbPPzrMOWBw9+Cegk/rtsHzYjRnQ/FnE/
IGq5YwZhGvEP1urMgG9Z6LwB98fOwbMYKw==
-----END EC PRIVATE KEY-----

@cadey Reminds me of this: https://media.ccc.de/v/29c3-5275-en-facthacks_h264#t=2858
(see the video timestamp)