better check for forbidden ecdsa key

ddebin · ddebin · commit b05bcf4bf9ae · 2026-03-29T15:42:55.000+02:00
diff --git a/src/lib/ssh_agent_client.ts b/src/lib/ssh_agent_client.ts
@@ -256,7 +256,7 @@ export class SSHAgentClient {
     key: SSHKey,
     seed: string,
   ): Promise<{ cipherKey: crypto.KeyObject; ivLength: number }> {
-    if (key.type !== 'ssh-rsa' && key.type !== 'ssh-ed25519') {
+    if (/ecdsa/iu.test(key.type)) {
       throw new Error(`${key.type} key is forbidden, it always gives different signatures!`)
     }
     // Use SSH signature as decryption key

Original file line number	Diff line number	Diff line change
`@@ -256,7 +256,7 @@ export class SSHAgentClient {`
`256`	`256`	`key: SSHKey,`
`257`	`257`	`seed: string,`
`258`	`258`	`): Promise<{ cipherKey: crypto.KeyObject; ivLength: number }> {`
`259`		`- if (key.type !== 'ssh-rsa' && key.type !== 'ssh-ed25519') {`
	`259`	`+ if (/ecdsa/iu.test(key.type)) {`
`260`	`260`	throw new Error(`${key.type} key is forbidden, it always gives different signatures!`)
`261`	`261`	`}`
`262`	`262`	`// Use SSH signature as decryption key`