Daniel Kahn Gillmor 909fbca196 gpg: default to 3072-bit RSA keys. ...

* agent/command.c (hlp_genkey): update help text to suggest the use of
3072 bits.
* doc/wks.texi: Make example match default generation.
* g10/keygen.c (DEFAULT_STD_KEY_PARAM): update to
rsa3072/cert,sign+rsa3072/encr, and fix neighboring comment,
(gen_rsa, get_keysize_range): update default from 2048 to 3072).
* g10/keyid.c (pubkey_string): update comment so that first example
is the default 3072-bit RSA.

--

3072-bit RSA is widely considered to be 128-bit-equivalent security.
This is a sensible default in 2017.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

Gbp-Pq: Topic update-defaults
Gbp-Pq: Name 0015-gpg-default-to-3072-bit-RSA-keys.patch

2017-09-08 11:37:42 -04:00

..

agent.h

agent: Fix string translation for Windows

2017-08-23 11:04:47 +02:00

all-tests.scm

tests: Make it possible to run all tests using our infrastructure.

2017-05-11 18:12:37 +02:00

cache.c

agent: Serialize access to passphrase cache.

2017-04-07 08:39:26 +09:00

call-pinentry.c

agent: For OCB key files return Bad Passprase instead of Checksum Error.

2017-07-28 11:51:04 +02:00

call-scd.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

ChangeLog-2011

Fix typos

2015-10-28 10:20:17 +01:00

command-ssh.c

agent: Minor fix for Windows.

2017-07-24 15:26:20 +09:00

command.c

gpg: default to 3072-bit RSA keys.

2017-09-08 11:37:42 -04:00

cvt-openpgp.c

agent: Resolve conflict of util.h.

2017-03-07 19:22:48 +09:00

cvt-openpgp.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

divert-scd.c

agent: Fix memory leaks.

2017-05-30 13:56:20 +09:00

findkey.c

agent: Minor cleanup (mostly for documentation).

2017-07-28 10:38:57 +02:00

genkey.c

agent: Use MAX_PASSPHRASE_LEN (255) also for the loopback.

2017-07-05 11:54:45 +02:00

gpg-agent-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpg-agent.c

Simple typo fix.

2017-08-07 01:03:52 -04:00

keyformat.txt

Clean up word replication.

2017-02-21 13:11:46 -05:00

learncard.c

agent,g10: Remove redundant SERIALNO request.

2017-03-16 14:32:51 +09:00

Makefile.am

tests: Make it possible to run all tests using our infrastructure.

2017-05-11 18:12:37 +02:00

pkdecrypt.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

pksign.c

agent: Minor cleanup (mostly for documentation).

2017-07-28 10:38:57 +02:00

preset-passphrase.c

Fix usage of ARGPARSE_OPTS.

2017-07-19 13:41:18 +09:00

protect-tool.c

agent: Resolve conflict of util.h.

2017-03-07 19:22:48 +09:00

protect.c

agent: For OCB key files return Bad Passprase instead of Checksum Error.

2017-07-28 11:51:04 +02:00

t-protect.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

trans.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

trustlist.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

w32main.c

agent: Resolve conflict of util.h.

2017-03-07 19:22:48 +09:00

w32main.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00