OpenSSH-style SHA-256 fingerprints. Stored fingerprints move from md5-hex to SHA256:<base64> (matches ssh-keygen -lf). Run drush updatedb after upgrading — existing rows are migrated in batched chunks.
Minimum RSA modulus length as a per-field setting (default 2048 bits; 0 disables). Enforced via phpseclib.
Full structural validation. Every accepted algorithm is parsed by