find_bad_key.sh

find_bad_key.sh (text/plain), 641 bytes, created by Alexander Sergeyev on 2018-08-26 14:37:07 UTC

#!/bin/bash
set -o errexit

readonly tmp_path=$(mktemp --directory)
function cleanup { [[ ! -z "$tmp_path" ]] && rm -r "$tmp_path"; }
trap cleanup EXIT

cd "${tmp_path}"
for ((i=0;i<10000;++i)); do
    ssh-keygen -t ecdsa -b 521 -N "12345678" -f testkey 1>/dev/null
    if ssh-keygen -y -f testkey 0<&- 2>&1 | grep -q invalid; then
        echo "[attempt #$i] found a broken key (passphrase = 12345678):"
        echo; echo "# $ ssh-keygen -y -f testkey 0<&- 2>&1"
        ssh-keygen -y -f testkey 0<&- 2>&1 | sed 's/^/# /' || :
        echo
        cat testkey
        exit 0
    fi
    rm ./testkey*
done
echo "No broken keys in $i tries"