openssh-blacklist - list of default blacklisted OpenSSH RSA and DSA keys

Property Value
Distribution Ubuntu 16.04 LTS (Xenial Xerus)
Repository Ubuntu Main amd64
Package filename openssh-blacklist_0.4.1+nmu1_all.deb
Package name openssh-blacklist
Package version 0.4.1+nmu1
Package release -
Package architecture all
Package type deb
Category net
Homepage -
License -
Maintainer Ubuntu Developers <>
Download size 1.75 MB
Installed size 3.97 MB
Contains the list of known-bad default OpenSSH keys, for ssh-vulnkeys to
use when examining suspect keys: DSA-1024, RSA-2048


Package Version Architecture Repository
openssh-blacklist_0.4.1+nmu1_all.deb 0.4.1+nmu1 all Ubuntu Main
openssh-blacklist - - -


Name Value
dpkg >= 1.10.24


Type URL
Binary Package openssh-blacklist_0.4.1+nmu1_all.deb
Source Package openssh-blacklist

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install openssh-blacklist deb package:
    # sudo apt-get install openssh-blacklist




2012-09-22 - Cyril Brulebois <>
openssh-blacklist (0.4.1+nmu1) unstable; urgency=low
* Non-maintainer upload.
* Compress all binaries with xz (Closes: #687267).
2008-05-29 - Kees Cook <>
openssh-blacklist (0.4.1) unstable; urgency=low
* debian/openssh-blacklist{,-extra}.preinst: Correctly clean up old
/etc/ssh blacklist entries (Closes: 483549).
2008-05-28 - Kees Cook <>
openssh-blacklist (0.4) unstable; urgency=low
* Relocate blacklists to /usr/share/ssh (Closes: #481283).
2008-05-20 - Kees Cook <>
openssh-blacklist (0.3) unstable; urgency=low
* Add RSA-4096 blacklists to -extra.
* Add empty DSA-2048, since they weren't any bad ones.
* Add as a demonstration for how to generate
blacklist for non-standard key sizes (Closes: #481181).
* Add Pre-Depends on bzip2-capable dpkg to avoid getting into
uninstallable situations on out-of-support releases of Debian and
Ubuntu (Closes: #481960), thanks to Paul Sladen.
2008-05-18 - Kees Cook <>
openssh-blacklist (0.2.1) unstable; urgency=low
* Split source blacklists by architecture, sorted by process id.  Dropped
impossible pid 0 and 32768.
2008-05-16 - Kees Cook <>
openssh-blacklist (0.2) unstable; urgency=low
* add "openssh-blacklist-extra" for non-default key sizes.
* blacklist.*: strip out redundant key sizes
* add RSA-1024 to -extra
2008-05-13 - Colin Watson <>
openssh-blacklist (0.1.1) stable-security; urgency=low
* Set Maintainer to Kees for Debian.
2008-05-13 - Colin Watson <>
openssh-blacklist (0.1.0) unstable; urgency=low
* Upload to unstable.
2008-05-09 - Kees Cook <>
openssh-blacklist (0.1) stable-security; urgency=low
* Initial release.

See Also

Package Description
openssh-client_7.2p2-4_amd64.deb secure shell (SSH) client, for secure access to remote machines
openssh-server_7.2p2-4_amd64.deb secure shell (SSH) server, for secure access from remote machines
openssh-sftp-server_7.2p2-4_amd64.deb secure shell (SSH) sftp server module, for SFTP access from remote machines
openssl_1.0.2g-1ubuntu4_amd64.deb Secure Sockets Layer toolkit - cryptographic utility
openstack-dashboard-ubuntu-theme_9.0.0-0ubuntu2_all.deb Ubuntu theme for the OpenStack dashboard
openstack-dashboard_9.0.0-0ubuntu2_all.deb Django web interface for OpenStack
openvpn_2.3.10-1ubuntu2_amd64.deb virtual private network daemon
openvswitch-common_2.5.0-0ubuntu1_amd64.deb Open vSwitch common components
openvswitch-switch-dpdk_2.5.0-0ubuntu1_amd64.deb DPDK enabled Open vSwitch switch implementation
openvswitch-switch_2.5.0-0ubuntu1_amd64.deb Open vSwitch switch implementations
optipng_0.7.6-1_amd64.deb advanced PNG (Portable Network Graphics) optimizer
orbit2_2.14.19-1build1_amd64.deb high-performance CORBA implementation - Object Request Broker
os-brick-common_1.2.0-2_all.deb Library for managing local volume attaches - common files
os-prober_1.70ubuntu3_amd64.deb utility to detect other OSes on a set of drives
overlay-scrollbar-gtk2_0.2.17.1+16.04.20151117-0ubuntu1_amd64.deb GTK 2 module for overlay scrollbars