tech · quantum risk

Is SSH bastion Quantum Proof? Network Security & PQC

Risk: high · Confidence: high · Reviewed: 2026-07-19

Verdict

SSH bastions are not quantum-proof while host and user authentication use classical public-key algorithms. Hybrid KEX and certificate-based SSH help operations; algorithm migration is still required.

Overview

Bastions and jump hosts centralize admin access to fleets. That makes their host keys and access policies critical—quantum or classical.

See also /is-quantum-proof/ssh for general SSH quantum framing; this page focuses on bastion concentration and certificate-based access patterns.

Cryptographic profile

Signatures: SSH host keys (RSA/ECDSA/Ed25519 common), User keys and certificates
Hash: SSH fingerprints / KEX transcripts
Public-key exposure: Bastions concentrate administrative access; host keys are long-lived trust anchors.

What breaks

Long-lived classical host keys on bastions
User authorized_keys sprawl without rotation
Recorded sessions if only classical KEX was negotiated

Mitigations

Inventory bastion host keys and algorithms
Prefer SSH certificates with short lifetimes where possible
Enable hybrid/post-quantum KEX when OpenSSH/vendor support exists
Break-glass procedures for host key rotation

FAQ

Are bastions safer than direct SSH?

They improve operational control and auditing; they concentrate cryptographic risk on fewer high-value hosts.

Does Ed25519 host key fix quantum risk?

Ed25519 is modern classical crypto—not NIST PQC.

Key concepts (technical dictionary)

Terms used on this page — open a definition:

Full technical dictionary →