SSH Key Fingerprints for Grad and Ugrad Net Linux Computers

(Redirected from SSH Keys)

SSH Key Integrity

SSH uses cryptographic host keys to identify the hosts you log in to. You should make use of these host keys to verify the identity of our Linux clients and make sure no one is interfering with your secure connection. You can verify our host keys in one of two ways.

Verify Host Key Signatures

Our recommended approach is to use the CS department's internal certificate authority's signatures on the host keys. You do that by adding the following line to your SSH client's known_hosts file:

@cert-authority *.cs.jhu.edu ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOd3xesHEdXkh0XWE4lMNWsNpDP1mK+AoNNSplbEbNpS SSH-CA@cs.jhu.edu

On Linux systems, the known_hosts file should be in ~/.ssh/known_hosts . If the file does not exist, you can create it. Other SSH clients might store the information in a different location or a different format. Check your SSH client's documentation to find out where you need to put the above information.

Once the above line is in place, you should be able to SSH to any of our Linux clients without any prompts about system identity. Your SSH client will verify our systems' identities in the background and will silently accept data from them after verification.

Verify Host Key Fingerprints

If you cannot put the CS certificate authority information into your known_hosts file, you will need to verify each system's key fingerprint the first time you connect to it. You will have to do this separately for each different CS Linux client you use. (That's one reason we recommend the previous method over this one; the previous method is less cumbersome.)

When you connect to a system for the first time, your SSH client will indicate that it does not have any way to identify the remote system and it will show you a fingerprint for the system's host key. The precise nature of this notification will vary from one client to another, but the command line SSH client in Linux and macOS should print something like this:

The authenticity of host 'gradx.cs.jhu.edu (128.220.35.100)' can't be established.
ED25519 key fingerprint is SHA256:tDsaxuPu3F+dU4Z+8cAO07bdNnoOC5wlrEbj20ouPGI.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? 

In this example, the remote system is named gradx.cs.jhu.edu. The remote system (gradx) has an ED25519 host key. That key has a fingerprint of SHA256:tDsaxuPu3F+dU4Z+8cAO07bdNnoOC5wlrEbj20ouPGI, calculated with the SHA256 hash algorithm.

You should look up the fingerprint in the tables below. If the fingerprint shown by your SSH client matches the one on this page (for the given system, key type, and hash algorithm), you can tell your client to accept the key. Your client should save the host key for future reference and you won't be asked about the identity of this particular system again.

NOTE: If the fingerprint does not match, you should not try to connect. You can email support@cs.jhu.edu to let us know, but there may not be a lot we will be able to do at our end to assist you, aside from perhaps offering some general advice. There are many possible reasons for a key mismatch, we will generally not be able to tell which one applies in your case, the problems are usually outside of our control, and the source of the problem is likely to be either on your computer or somewhere in the network between your computer and ours.

Tip: Note how the SSH client in the example above asks, "Are you sure you want to continue connecting (yes/no/[fingerprint])?". If you type "yes", it will connect (and remember the host key for later). If you type "no", it will not connect. But you can also copy and paste the key fingerprint on this page into the client's prompt. If you do that, the client will verify the fingerprint itself and only proceed if it matches. That can be easier than checking all of the parts of the fingerprint yourself. You have to use the fingerprint that matches the key type and the hash algorithm, and you have to include the hash prefix for the fingerprint. So pasting "SHA256:tDsaxuPu3F+dU4Z+8cAO07bdNnoOC5wlrEbj20ouPGI" into the above prompt would be the same as typing "yes". Not all SSH clients have a feature like this, but it can be convenient if yours does.


SSH Fingerprints for Grad Net Clients

Hostname Key Type Hash Format Fingerprint
gradx.cs.jhu.edu ED25519 SHA256 SHA256:tDsaxuPu3F+dU4Z+8cAO07bdNnoOC5wlrEbj20ouPGI
MD5 MD5:c4:c1:0b:13:85:15:00:11:d4:8a:e2:e5:af:88:db:f8
Bubblebabble xusir-mebef-latek-bekyg-lodoh-vilid-lobof-lypor-zasat-mitog-dixux
RSA SHA256 SHA256:daF2DD8uuga/56YU/wVX4C02O8nr9MP8j8Hv4kLQNr4
MD5 MD5:ed:51:a9:09:b6:58:a5:f0:f5:1e:1b:4e:7b:4f:69:a1
Bubblebabble xipec-kepes-bofog-hicis-bydul-rytus-kadus-gukal-gyveg-vekyk-nyxox
gradz.cs.jhu.edu ED25519 SHA256 SHA256:PEAbMttKp5mmG3b8U3dcG3x7X8NXwS/SA5KWHlUl0FY
MD5 MD5:a8:49:8a:62:33:8f:95:f5:f8:95:16:5e:f5:dd:35:8a
Bubblebabble xopob-kykub-hylim-binib-butyv-filep-fumug-kydaz-pemag-dezys-fyxax
RSA SHA256 SHA256:2hjl68rZkDcInOfA67/2vQjJxC73sPKl4KIdovhqvIU
MD5 MD5:26:95:18:d5:34:42:61:00:b5:38:f5:de:9e:d7:e0:20
Bubblebabble xopah-gegik-nivip-guhes-syzoh-faruk-rapys-kulak-kaved-luhel-hyxux
masters1.cs.jhu.edu ED25519 SHA256 SHA256:X/p5dYJLcz+sHtT6ImDkI2QM00ymNZ88vpbM90MNL10
MD5 MD5:88:c6:f2:74:86:98:f4:b9:b9:96:2d:1d:0e:ea:77:db
Bubblebabble xinod-busik-tufyf-rosac-romis-gunaz-fazum-fivuz-tugal-gunul-zoxax
RSA SHA256 SHA256:vdVYkjGyCt1Cy9fYz4AiX7ysi9MxdZNbM+2666zlol4
MD5 MD5:c2:31:e3:25:af:6b:0b:57:5e:81:ca:8d:15:4f:54:2d
Bubblebabble xofom-nyvat-lisic-govyz-memud-gulif-rynur-tages-dodos-velal-lyxox
masters2.cs.jhu.edu ED25519 SHA256 SHA256:WxXh1MLScgYgPj0dY5rhB0zP8nh69mVbuh0OU3oNKoY
MD5 MD5:0c:5a:cf:78:2d:bc:51:4a:f4:0c:44:c6:0b:8e:9a:c7
Bubblebabble xonoz-synyz-fymon-myvyr-muzum-dilif-gukov-gebac-dapur-lihuf-pyxax
RSA SHA256 SHA256:WeZopUF01D4+5Hk0gpu5lLx/Xc9BQ7b2gU0Hir320r0
MD5 MD5:35:4f:5e:15:ac:43:ab:2e:69:15:e6:e6:9a:99:3d:ea
Bubblebabble xegih-pakov-migip-pesyp-cebak-cecon-vazov-bahog-cyvym-casos-lyxux
masters3.cs.jhu.edu ED25519 SHA256 SHA256:9uF/jL2PMw42SMmNz20Dze/3YoL+22dW/U5TVBj+7/Y
MD5 MD5:e8:d0:e8:5d:7a:ac:6e:f7:54:81:00:9c:06:d2:a0:cf
Bubblebabble xeret-nocyl-fyzag-futul-lovig-rirud-pekah-sukyr-gavac-mymyh-buxyx
RSA SHA256 SHA256:GJzmDgZgG1K+Br+q3eSlOfg1bjjJdnblrhOsRYwKD64
MD5 MD5:84:09:95:71:a5:f8:60:9e:13:f6:b7:3e:34:49:f6:bb
Bubblebabble xosol-vemyl-sekym-vimut-mofit-hisyt-vival-votoc-cotic-nunas-raxex
masters4.cs.jhu.edu ED25519 SHA256 SHA256:Jh0kVv0GnUgqwDO9MR2bxtMMefX0zdGNhRpp3aSiPHA
MD5 MD5:b3:1c:7c:3a:8b:ba:4c:77:b9:3f:dc:7b:fe:98:4f:18
Bubblebabble xuram-vaveb-dapyp-cefog-kyboh-gabym-tomas-gabug-mofur-mofil-vaxax
RSA SHA256 SHA256:h8eDx2v8/P70kuxXQ7ubQkQ+CXUKlgoS15WHIpX7i1M
MD5 MD5:05:6e:72:94:13:3f:6e:b6:92:86:35:e5:57:f3:66:ca
Bubblebabble xutat-zeber-nutav-guguz-fihuh-gucul-rosiz-subif-filul-ropag-zyxix

SSH Fingerprints for Ugrad Net Clients

Hostname Key Type Hash Format Fingerprint
ugradx.cs.jhu.edu ED25519 SHA256 SHA256:IjfRPzfeCGJLUVNFXeE5Tg0SRc/0JXdKxzQX+LN4SZg
MD5 MD5:11:d6:4e:ba:67:a6:ed:56:56:2e:cc:5a:d3:f4:65:57
Bubblebabble xovaz-rylif-ryvis-rosor-fulaf-mupez-hever-naleb-sybys-tyfek-gaxux
RSA SHA256 SHA256:wx9PPRBKec5+Akd5bd7mt2CNDoxPlLoX5HUkT4H7IJA
MD5 MD5:df:3e:b8:d9:4e:7b:41:da:68:12:ca:7b:32:d5:a2:a9
Bubblebabble xoliv-miret-mubih-hotym-sugav-vugeh-dolef-gapav-vifyd-zutyf-mexux
ugradz.cs.jhu.edu ED25519 SHA256 SHA256:abEthx/Nju06M40eHIadrgFeR7LMzs6O65Jv/FHCHnU
MD5 MD5:fe:10:60:0c:6e:01:64:ad:3b:89:11:b5:d3:e5:83:5b
Bubblebabble xucan-mevur-gizul-cufab-vohuc-dafup-nocev-talol-mimur-ponem-suxax
RSA SHA256 SHA256:hxeXz+LUUxqBSpBg5xMxmYWafvLNGJfyGBecyaldBKE
MD5 MD5:eb:d5:36:a0:50:77:41:78:8d:a9:c8:5d:1b:a5:a6:49
Bubblebabble xodet-kudud-rupil-hupys-morob-rodaz-relen-panib-vocug-zoner-guxyx
ugrad1.cs.jhu.edu ED25519 SHA256 SHA256:SlFQQ/pkx7NREJrQ1r4dK4spsCM7F4TD1BUImLrWlfA
MD5 MD5:f3:da:16:56:be:b3:c8:70:f1:77:ae:de:a2:14:ca:4e
Bubblebabble xosad-dicic-ledis-dirup-norom-vidiv-tudav-pygit-gyhut-limud-goxox
RSA SHA256 SHA256:E7Auuf38b3l6xDtwt2mAbxEm1nmsvKw+a5HmVt66sB8
MD5 MD5:62:b6:52:df:b0:16:de:59:07:2f:92:ba:87:87:61:ef
Bubblebabble xodec-cydiv-fucib-mikat-didiz-kalat-rabor-mydul-civob-lyvuk-hoxix
ugrad2.cs.jhu.edu ED25519 SHA256 SHA256:yxHMXHJ4HM0uh7zoOLnPESDptY+S5OLhhUY7R/gq6YM
MD5 MD5:f9:87:cb:35:fb:3f:4c:fc:03:86:b0:d9:cc:cb:39:c5
Bubblebabble xedat-notes-kuzeb-begur-lopom-nehis-vafih-pyrib-hagep-rekiz-vixyx
RSA SHA256 SHA256:g2GutvwDsjVCP8E1jrN7e8heQvtWyxy+zLpUWwn2UVg
MD5 MD5:f7:c4:1f:76:ee:c5:a1:8d:ba:c8:c8:a4:d5:96:a1:67
Bubblebabble xegol-tacic-cosyl-seryc-nufyk-hibov-vizob-rumoz-sifiv-gotap-noxox
ugrad3.cs.jhu.edu ED25519 SHA256 SHA256:lLY6i/2lxTAh9/6ckjWGL386m2T1u5DH33kDZ4/nyr0
MD5 MD5:90:3d:c2:bc:b9:78:4c:23:71:57:26:b1:ec:b3:50:b9
Bubblebabble xubah-fyner-muzek-cudid-syryk-motas-rytav-giged-hihel-lakyn-vyxex
RSA SHA256 SHA256:/lAUNYp/0QsbhqSraZnt1Gl5eqsc9wbseJDkz6XeAo8
MD5 MD5:ee:31:f7:3b:df:38:9b:b5:5e:9b:84:21:16:51:a0:cb
Bubblebabble xemer-povus-semyr-pacit-zogek-nifuz-tinit-sitab-cufyz-demyb-fuxix
ugrad4.cs.jhu.edu ED25519 SHA256 SHA256:/AjKjwxJRIx0YV74yL7RTOGAY/Xremw12D/LbojEEhs
MD5 MD5:93:d0:26:74:44:e2:c7:7e:10:eb:c0:79:2d:a8:da:a1
Bubblebabble xucib-zyzef-ravap-vegek-rucyk-cegot-vilyt-bisot-zahin-rybuc-hexox
RSA SHA256 SHA256:H4TtRSfWbL81IGHFJImgee3/qG53iebUXMbsYVGQugk
MD5 MD5:1f:e1:ce:a1:e5:24:75:1b:9d:86:32:0e:d5:6f:fb:59
Bubblebabble xihis-bucip-kylis-dulok-nycak-lyzoc-ryrit-tagys-fygep-nadud-daxux
ugrad5.cs.jhu.edu ED25519 SHA256 SHA256:VC7r9Lg2Xfht+w5vhD+8SVK/JOrwk5v21VtTxTx1Qso
MD5 MD5:3d:95:29:d0:e3:2d:fa:ce:24:b8:4d:df:81:db:16:9b
Bubblebabble xelef-tapin-tefab-cycos-nitat-papok-cokab-sulos-hazyr-hifub-buxyx
RSA SHA256 SHA256:dp/4nv+6+NvOfmOW1cmiKixL9r8CHLOuq8seTUR/TqA
MD5 MD5:9b:83:56:34:2d:9f:af:77:af:76:98:bf:2b:45:34:b7
Bubblebabble xubiz-tihif-zicuk-sogod-nokel-bacyc-fyhig-kicyb-buzos-cavud-soxyx
ugrad6.cs.jhu.edu ED25519 SHA256 SHA256:X0iChR7ejVgmwAS0EyWCigUxFUBrAKl1FD5o1PrU2bQ
MD5 MD5:e8:7e:22:8f:e2:0f:8f:f0:d9:f2:ba:b1:43:f7:ba:92
Bubblebabble ximod-picur-resig-puvic-rovyb-rytyg-nipah-nygap-nasug-mucas-dyxox
RSA SHA256 SHA256:30ujTjS4voP4VOgRDYrd7LLNtzoNeQHXjFkE1YXBjCk
MD5 MD5:6d:73:02:f5:61:4e:0b:0d:fe:55:14:ba:af:51:74:71
Bubblebabble xekor-goryb-padus-titaf-cymoc-nylyl-nanat-nofad-dopah-bukyk-fyxux
ugrad7.cs.jhu.edu ED25519 SHA256 SHA256:GgVdcTq4vFHMAzXuhNxLlm43Gi9YZPvKJ1uouECaAtw
MD5 MD5:96:a4:40:af:fa:a1:81:97:63:3a:07:0c:bd:bd:2d:39
Bubblebabble xebep-fimek-modim-penef-kirog-godes-gipym-pupiv-sorym-hycig-laxyx
RSA SHA256 SHA256:ZNEjJdfPAA+KxDyniYS19jxHTl0Ed97nEJxvhTmSUig
MD5 MD5:15:b3:e3:a5:a9:9c:03:df:95:28:52:4b:33:26:da:73
Bubblebabble xuhek-sytag-giget-bykis-lerur-deses-demup-nusag-lemyh-zimel-hyxyx
ugrad8.cs.jhu.edu ED25519 SHA256 SHA256:pTrG8qlZuu16MVWOQCGjgNIgnAI442GbQKsT1oqk3y8
MD5 MD5:05:bb:63:13:43:85:18:66:f4:7a:ca:19:c2:91:ac:08
Bubblebabble xivet-gohot-ripuc-vamod-lynul-nyroz-givug-simeh-tykub-bafam-hexex
RSA SHA256 SHA256:/iMbR0wL4r52rL5/ty8WakqmhKYZLdjNflVAuimsrF8
MD5 MD5:70:bd:e7:2d:55:6b:2e:e4:38:9f:0a:c1:06:1d:53:70
Bubblebabble xufaf-donin-comon-gabid-nihyg-firor-fypad-muvuv-lugyz-ketam-cyxax
ugrad9.cs.jhu.edu ED25519 SHA256 SHA256:GvTxUpnxiPBenX7Emtdx9SKIz6R0bKMJEH8JzPjilXE
MD5 MD5:78:88:71:2f:4a:85:10:0c:7e:e2:d8:56:3f:0e:88:f4
Bubblebabble xilik-zogav-rokez-dibuv-galer-hekad-lotat-damab-betup-fydip-sixux
RSA SHA256 SHA256:SAd53/9mbwCtcJFyS8nh3ghxiF83n/w49mdjz6I/j9s
MD5 MD5:1a:a7:0c:4f:32:05:0f:5c:a2:f4:e3:5a:7b:0e:b5:c0
Bubblebabble xupil-hymyv-dutus-fagaz-subif-litoc-vynep-kymek-kacyr-hagup-suxyx
ugrad10.cs.jhu.edu ED25519 SHA256 SHA256:/EIk83XaAHaIGjJXmEEpS3pmXmDQTR7ZcixVPJmYAY8
MD5 MD5:02:38:81:46:a3:f0:24:69:6b:1f:4e:87:05:9f:86:cc
Bubblebabble xizol-vivoz-lazar-colyk-lopuc-kafek-tocyz-kitek-cecob-syhut-byxex
RSA SHA256 SHA256:PLV09yifvRtXjXdnWLrrMBjvB92RlfGssECia4O8pzA
MD5 MD5:2a:28:be:e8:c3:54:4b:0b:e7:a9:49:86:94:58:ec:5c
Bubblebabble xelaz-pizor-vocez-fanyc-zafep-cebor-hebut-kimyn-mugeg-locek-zyxix
ugrad11.cs.jhu.edu ED25519 SHA256 SHA256:XYZKHCdt3nQALm9n/KzL95JxHZCz+Sp0+TzSuXlI99I
MD5 MD5:04:28:e8:c8:2f:03:2b:a8:7f:64:53:25:a3:97:24:38
Bubblebabble xepan-zezom-tivev-dosed-kozaz-romof-zyvit-tifyc-kyguf-nufog-guxex
RSA SHA256 SHA256:qQdX8zUkFNNS9cADi0i1dFDkKpHn9hDawEDIWjFSrgc
MD5 MD5:cd:2e:ef:38:a8:23:2d:46:9c:17:a2:b8:61:1e:be:52
Bubblebabble xezep-hybur-vumod-zikob-kunib-fetul-huryp-vofag-mivyz-sypas-roxux
ugrad12.cs.jhu.edu ED25519 SHA256 SHA256:B/1NhbJQ+37nGVHMcRZVXGE98ISMzgyOmgiaBb3C68E
MD5 MD5:81:89:16:40:69:0f:bd:ae:52:9f:c4:81:2f:3a:4d:9d
Bubblebabble xoren-mofad-mebet-lupah-zikyd-pazys-fuvyc-nakaz-lokod-fosan-pixux
RSA SHA256 SHA256:WMBYxhPp4CahZmcvAZ7HTUHCgc7lVj4f3nfOOoe5jZE
MD5 MD5:c6:ca:7f:c1:86:18:cc:4b:db:61:e1:18:3f:f6:0d:b1
Bubblebabble xosid-sifis-nesuh-gigir-hyhah-hylag-vazas-mukak-ludiv-fohyv-rixix