I think ssh-keygen -p -o -f (oldfile) should do the trick.

		tptacek on Aug 3, 2018 \| parent \| context \| favorite \| on: The default OpenSSH key encryption is worse than p... I think `ssh-keygen -p -o -f (oldfile)` should do the trick.