security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00
Code Activity

gpg: default to 3072-bit RSA keys.

Browse source 
* agent/command.c (hlp_genkey): update help text to suggest the use of
3072 bits.
* doc/wks.texi: Make example match default generation.
* g10/keygen.c (DEFAULT_STD_KEY_PARAM): update to
rsa3072/cert,sign+rsa3072/encr, and fix neighboring comment,
(gen_rsa, get_keysize_range): update default from 2048 to 3072).
* g10/keyid.c (pubkey_string): update comment so that first example
is the default 3072-bit RSA.

--

3072-bit RSA is widely considered to be 128-bit-equivalent security.
This is a sensible default in 2017.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

Gbp-Pq: Topic update-defaults
Gbp-Pq: Name 0015-gpg-default-to-3072-bit-RSA-keys.patch
This commit is contained in:
Daniel Kahn Gillmor 2017-09-07 18:41:10 -04:00
parent 7955262151
commit 909fbca196
4 changed files with 9 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

4
doc/wks.texi
View file

@ -301,11 +301,11 @@ the submission address:
The output of the last command looks similar to this:
@example
sec rsa2048 2016-08-30 [SC]
sec rsa3072 2016-08-30 [SC]
C0FCF8642D830C53246211400346653590B3795B
uid [ultimate] key-submission@@example.net
bxzcxpxk8h87z1k7bzk86xn5aj47intu@@example.net
ssb rsa2048 2016-08-30 [E]
ssb rsa3072 2016-08-30 [E]
@end example
Take the hash of the string "key-submission", which is