Datatypes

SSH key fingerprint

ID ssh_key_fingerprint

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Fingerprint of an SSH public key, as printed by ssh-keygen -l and shown when a client first connects to a host: SHA256: and 43 characters of unpadded Base64 (the default since OpenSSH 6.8), or the legacy MD5 form of 16 colon-separated hexadecimal octets, optionally after MD5:.

Categories
Cryptographic identifiers
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?:SHA256:[A-Za-z0-9+/]{43}|(?:MD5:)?[0-9a-f]{2}(?::[0-9a-f]{2}){15})$

Python re syntax.

Examples

ValueDescription
SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqUFingerprint of the Ed25519 host key of github.com
SHA256:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2sFingerprint of the RSA host key of github.com
MD5:65:96:2d:fc:e8:d5:a9:11:64:0c:0f:ea:00:6e:5b:bdLegacy MD5 fingerprint of the Ed25519 host key of github.com (ssh-keygen -E md5)
AE:C4:60:61:F4:58:FC:B5:6E:20:4A:11:79:DE:BB:CF:23:7F:1C:53 invalidSHA-1 fingerprint of an X.509 certificate (20 octets)

Sources

Use this record