Daniel Kahn Gillmor 9420c525db gpg: default to 3072-bit RSA keys. ...

* agent/command.c (hlp_genkey): update help text to suggest the use of
3072 bits.
* doc/wks.texi: Make example match default generation.
* g10/keygen.c (DEFAULT_STD_KEY_PARAM): update to
rsa3072/cert,sign+rsa3072/encr, and fix neighboring comment,
(gen_rsa, get_keysize_range): update default from 2048 to 3072).
* g10/keyid.c (pubkey_string): update comment so that first example
is the default 3072-bit RSA.

--

3072-bit RSA is widely considered to be 128-bit-equivalent security.
This is a sensible default in 2017.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

(cherry picked from commit 909fbca19678e6e36968607e8a2348381da39d8c)

Gbp-Pq: Topic from-master
Gbp-Pq: Name gpg-default-to-3072-bit-RSA-keys.patch

2019-07-20 14:16:20 -04:00

..

agent.h

agent: Allow threads to interrupt main select loop with SIGCONT.

2019-07-20 14:16:20 -04:00

all-tests.scm

tests: Make it possible to run all tests using our infrastructure.

2017-05-11 18:12:37 +02:00

cache.c

agent: Make the request origin a part of the cache items.

2018-03-27 08:40:58 +02:00

call-pinentry.c

agent: Clear bogus pinentry cache, when it causes an error.

2019-02-06 16:54:14 +09:00

call-scd.c

agent: Avoid tight timer tick when possible.

2019-07-20 14:16:20 -04:00

ChangeLog-2011

Fix typos

2015-10-28 10:20:17 +01:00

command-ssh.c

agent: For SSH key, don't put NUL-byte at the end.

2019-05-21 09:15:41 +02:00

command.c

gpg: default to 3072-bit RSA keys.

2019-07-20 14:16:20 -04:00

cvt-openpgp.c

agent: Make the request origin a part of the cache items.

2018-03-27 08:40:58 +02:00

cvt-openpgp.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

divert-scd.c

agent: Fix for suggested Libgcrypt use.

2019-02-25 08:49:31 +01:00

findkey.c

agent: correct length for uri and comment on 64-bit big-endian platforms

2019-05-14 10:34:13 +02:00

genkey.c

agent: Make the request origin a part of the cache items.

2018-03-27 08:40:58 +02:00

gpg-agent-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpg-agent.c

agent: Avoid scheduled checks on socket when inotify is working.

2019-07-20 14:16:20 -04:00

keyformat.txt

doc: Fix Dijkstra

2017-12-08 07:40:06 +01:00

learncard.c

agent: Fix returning GPG_ERR_NOT_FOUND wrongly.

2017-11-02 17:04:03 +01:00

Makefile.am

tests: Make it possible to run all tests using our infrastructure.

2017-05-11 18:12:37 +02:00

pkdecrypt.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

pksign.c

agent: Minor cleanup (mostly for documentation).

2017-07-28 10:38:57 +02:00

preset-passphrase.c

Fix usage of ARGPARSE_OPTS.

2017-07-19 13:41:18 +09:00

protect-tool.c

agent: Make the request origin a part of the cache items.

2018-03-27 08:40:58 +02:00

protect.c

agent: Make the S2K calibration time runtime configurable.

2018-12-11 18:14:38 +01:00

t-protect.c

agent: Fix description of shadow format.

2017-12-08 09:19:50 +09:00

trans.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

trustlist.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

w32main.c

agent: Resolve conflict of util.h.

2017-03-07 19:22:48 +09:00

w32main.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00