Secure ssh key generation

how_to

@@ -723,11 +723,18 @@ Euro truck simulator 2:
         winetricks dotnet45
         Confirmed to work on a 32 bits prefix, untested on 64
 
-SSH, get machine fingerprints:
-    Local
-        find /etc/ssh/ -name "ssh_host_*.pub" -exec ssh-keygen -lf '{}' \;
-    Remote
-        ssh-keyscan <hostname> 2>/dev/null | ssh-keygen -lf /dev/stdin
+ssh:
+    get machine fingerprints:
+        Local
+            find /etc/ssh/ -name "ssh_host_*.pub" -exec ssh-keygen -lf '{}' \;
+        Remote
+            ssh-keyscan <hostname> 2>/dev/null | ssh-keygen -lf /dev/stdin
+    Generate secure keypairs
+        # https://security.stackexchange.com/a/144044
+        Elliptic curve: best but maybe not supported everywhere
+            ssh-keygen -t ed25519 -a 100
+        Good ol' RSA, with 4096 bits for good measure
+            ssh-keygen -t rsa -b 4096 -o -a 100
 
 Run MSVC on linux with Wine:
     As seen on the internet, not tested: