OpenSSH 9.5 released with keystroke timing obfuscation
More importantly (IMHO):    ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).

* https://www.openssh.com/releasenotes.html#9.5Previously, if you didn't specify "-t", you got RSA keys; now you get Ed25519, and if you want RSA you have to ask for it.NIST's publication of FIPS 186-5 in February (2023) added Ed25519 and Ed448 as approved (? allowed?) algorithms:* https://csrc.nist.gov/publications/detail/fips/186/5/final* https://en.wikipedia.org/wiki/EdDSA#Standardization_and_impl...Partly one of the reasons given for the default switch:* https://lists.mindrot.org/pipermail/openssh-unix-dev/2023-Se...Curious to know if/when the OpenSSH folks will add Ed448 (RFC 8709, like Ed25519).