ipfire-2.29-core190-x86_64.iso

IPFire 2.29 Core 190

The IPFire project develops a minimal operating system for routers and firewalls. The project's latest release, IPFire 2.29 Core 190, provides a kernel update and begins phasing out support for RSA encryption: "We are starting the path to remove RSA from the IPFire web UI and SSH. On new installations, RSA keys won't be generated any more. On existing installations, this update removes the RSA key from the web UI, but we keep the RSA key for SSH to not break any monitoring tools, etc. We still believe that RSA is strong enough to be used in today's world, but since there is sufficient browser and SSH client support for Elliptic Curve Cryptography which is considered to be much stronger, we want to raise the bar for any potential future attacks on RSA. IPFire is also now using post-quantum cryptography for SSH key exchanges: Streamlined NTRU Prime sntrup761 and X25519 with SHA-512 (sntrup761x25519-sha512) and Module-Lattice-based Key-Encapsulation Mechanism (MK-KEM, mlkem768x25519-sha256) have been enabled."