ssh-keygen -G candidates -b 4096