openssh-blacklist - list of default blacklisted OpenSSH RSA and DSA keys

Property Value
Distribution Debian 7 (Wheezy)
Repository Debian Main amd64
Package name openssh-blacklist
Package version 0.4.1+nmu1
Package architecture all
Package type deb
Installed size 3.97 KB
Download size 1.75 MB
Official Mirror
Contains the list of known-bad default OpenSSH keys, for ssh-vulnkeys to
use when examining suspect keys: DSA-1024, RSA-2048


Package Version Architecture Repository
openssh-blacklist_0.4.1+nmu1_all.deb 0.4.1+nmu1 all Debian Main
openssh-blacklist - - -


Name Value
dpkg >= 1.10.24


Type URL
Binary Package openssh-blacklist_0.4.1+nmu1_all.deb
Source Package openssh-blacklist

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install openssh-blacklist deb package:
    # sudo apt-get install openssh-blacklist




2012-09-22 - Cyril Brulebois <>
openssh-blacklist (0.4.1+nmu1) unstable; urgency=low
* Non-maintainer upload.
* Compress all binaries with xz (Closes: #687267).
2008-05-29 - Kees Cook <>
openssh-blacklist (0.4.1) unstable; urgency=low
* debian/openssh-blacklist{,-extra}.preinst: Correctly clean up old
/etc/ssh blacklist entries (Closes: 483549).
2008-05-28 - Kees Cook <>
openssh-blacklist (0.4) unstable; urgency=low
* Relocate blacklists to /usr/share/ssh (Closes: #481283).
2008-05-20 - Kees Cook <>
openssh-blacklist (0.3) unstable; urgency=low
* Add RSA-4096 blacklists to -extra.
* Add empty DSA-2048, since they weren't any bad ones.
* Add as a demonstration for how to generate
blacklist for non-standard key sizes (Closes: #481181).
* Add Pre-Depends on bzip2-capable dpkg to avoid getting into
uninstallable situations on out-of-support releases of Debian and
Ubuntu (Closes: #481960), thanks to Paul Sladen.
2008-05-18 - Kees Cook <>
openssh-blacklist (0.2.1) unstable; urgency=low
* Split source blacklists by architecture, sorted by process id.  Dropped
impossible pid 0 and 32768.
2008-05-16 - Kees Cook <>
openssh-blacklist (0.2) unstable; urgency=low
* add "openssh-blacklist-extra" for non-default key sizes.
* blacklist.*: strip out redundant key sizes
* add RSA-1024 to -extra
2008-05-13 - Colin Watson <>
openssh-blacklist (0.1.1) stable-security; urgency=low
* Set Maintainer to Kees for Debian.
2008-05-13 - Colin Watson <>
openssh-blacklist (0.1.0) unstable; urgency=low
* Upload to unstable.
2008-05-09 - Kees Cook <>
openssh-blacklist (0.1) stable-security; urgency=low
* Initial release.

See Also

Package Description
openssh-client_6.0p1-4+deb7u4_amd64.deb secure shell (SSH) client, for secure access to remote machines
openssh-server_6.0p1-4+deb7u4_amd64.deb secure shell (SSH) server, for secure access from remote machines
openssl-blacklist-extra_0.5-3_all.deb Non-default blacklists of OpenSSL RSA keys
openssl-blacklist_0.5-3_all.deb Blacklists for OpenSSL RSA keys and tools
openssl_1.0.1e-2+deb7u20_amd64.deb Secure Socket Layer (SSL) binary and related cryptographic tools
openssn-data_1.3-1_all.deb modern submarine tactical simulator (data)
openssn_1.3-1_amd64.deb modern submarine tactical simulator
openstack-dashboard-apache_2012.1.1-10_all.deb OpenStack Dashboard - Apache support
openstack-dashboard_2012.1.1-10_all.deb OpenStack Dashboard
openstereogram_0.1+20080921-2_all.deb Stereogram ("Magic Eye") generator with GUI
openstreetmap-map-icons-classic_0.0.svn27763-1_all.deb Collection of map icons (classic set)
openstreetmap-map-icons-scalable_0.0.svn27763-1_all.deb Collection of map icons (scalable set)
openstreetmap-map-icons-square_0.0.svn27763-1_all.deb Collection of map icons (square set)
openstv_1.6.1-1_all.deb single transferable vote and instant runoff voting software
openswan-doc_2.6.37-3+deb7u1_all.deb Internet Key Exchange daemon - documentation