Computes the OpenSSH SHA-256 fingerprint of a raw SSH key blob.
This is the SHA256:... form that ssh-keygen -l prints and that servers advertise for
host-key pinning: the base64 (standard alphabet, no = padding) of the SHA-256 digest of
the wire-encoded key. Pass the raw key bytes a HostKeyVerifier receives to derive a
stable fingerprint to compare against a trusted value (trust-on-first-use, then pin).
Computes the OpenSSH SHA-256 fingerprint of a raw SSH key blob.
This is the
SHA256:...form thatssh-keygen -lprints and that servers advertise for host-key pinning: the base64 (standard alphabet, no=padding) of the SHA-256 digest of the wire-encoded key. Pass the raw key bytes a HostKeyVerifier receives to derive a stable fingerprint to compare against a trusted value (trust-on-first-use, then pin).