diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f3cb9196bb..bbf0b2b9fb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
         toolchain: stable
         target: ${{ matrix.target }}
     - name: Build release binary
-      run: cargo build --target ${{ matrix.target }} --verbose --release --features packaging,vendored-openssl
+      run: cargo build --target ${{ matrix.target }} --verbose --release --features packaging,openssl-on-win32,vendored-openssl
     - name: Build archive
       shell: bash
       run: |
diff --git a/CHANGELOG.md b/CHANGELOG.md
index f5e678c12e..1227a8ba3b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -78,6 +78,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   literals. This means that `snapshot.max-new-file-size="1"` and
   `snapshot.max-new-file-size=1` are now equivalent.
 
+* When built with the `openssl-on-win32` feature, ED25519 host keys are supported
+  when connecting to Git+SSH remotes on Windows.
+
 ## [0.16.0] - 2024-04-03
 
 ### Deprecations
diff --git a/Cargo.lock b/Cargo.lock
index 027395c8fb..7eeb77c9aa 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1694,6 +1694,7 @@ dependencies = [
  "jj-cli",
  "jj-lib",
  "libc",
+ "libssh2-sys",
  "maplit",
  "minus",
  "once_cell",
@@ -1744,6 +1745,7 @@ dependencies = [
  "insta",
  "itertools 0.12.1",
  "jj-lib-proc-macros",
+ "libssh2-sys",
  "maplit",
  "num_cpus",
  "once_cell",
diff --git a/Cargo.toml b/Cargo.toml
index 6812e75680..8ac9e3fa65 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -60,6 +60,7 @@ indoc = "2.0.4"
 insta = { version = "1.38.0", features = ["filters"] }
 itertools = "0.12.1"
 libc = { version = "0.2.153" }
+libssh2-sys = { version = "0.3.0" }
 maplit = "1.0.2"
 minus = { version = "5.6.1", features = ["dynamic_output", "search"] }
 num_cpus = "1.16.0"
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index 8d2b41c514..eddd9f7d5e 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -64,6 +64,7 @@ hex = { workspace = true }
 indexmap = { workspace = true }
 itertools = { workspace = true }
 jj-lib = { workspace = true }
+libssh2-sys = { workspace = true }
 maplit = { workspace = true }
 minus = { workspace = true }
 once_cell = { workspace = true }
@@ -104,6 +105,7 @@ jj-cli = { path = ".", features = ["test-fakes"], default-features = false }
 [features]
 default = ["watchman"]
 bench = ["dep:criterion"]
+openssl-on-win32 = ["libssh2-sys/openssl-on-win32", "jj-lib/openssl-on-win32"]
 packaging = []
 test-fakes = ["jj-lib/testing"]
 vendored-openssl = ["git2/vendored-openssl", "jj-lib/vendored-openssl"]
diff --git a/lib/Cargo.toml b/lib/Cargo.toml
index d7a68f6a13..19b6d348e8 100644
--- a/lib/Cargo.toml
+++ b/lib/Cargo.toml
@@ -49,6 +49,7 @@ hex = { workspace = true }
 ignore = { workspace = true }
 itertools = { workspace = true }
 jj-lib-proc-macros = { workspace = true }
+libssh2-sys = { workspace = true }
 maplit = { workspace = true }
 once_cell = { workspace = true }
 pest = { workspace = true }
@@ -92,6 +93,7 @@ tokio = { workspace = true, features = ["full"] }
 
 [features]
 default = []
-vendored-openssl = ["git2/vendored-openssl"]
+openssl-on-win32 = ["libssh2-sys/openssl-on-win32"]
+vendored-openssl = ["git2/vendored-openssl", "libssh2-sys/openssl-on-win32"]
 watchman = ["dep:tokio", "dep:watchman_client"]
 testing = []