diff options
| author | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2017-09-08 00:41:10 +0200 |
|---|---|---|
| committer | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2017-09-08 17:37:42 +0200 |
| commit | 909fbca19678e6e36968607e8a2348381da39d8c (patch) | |
| tree | a16bfd0bc1fd2ec01a1e8fd082a79b3d2b51b9bd /doc/wks.texi | |
| parent | gpgsm: default to 3072-bit keys. (diff) | |
| download | gnupg2-909fbca19678e6e36968607e8a2348381da39d8c.tar.xz gnupg2-909fbca19678e6e36968607e8a2348381da39d8c.zip | |
gpg: default to 3072-bit RSA keys.
* agent/command.c (hlp_genkey): update help text to suggest the use of
3072 bits.
* doc/wks.texi: Make example match default generation.
* g10/keygen.c (DEFAULT_STD_KEY_PARAM): update to
rsa3072/cert,sign+rsa3072/encr, and fix neighboring comment,
(gen_rsa, get_keysize_range): update default from 2048 to 3072).
* g10/keyid.c (pubkey_string): update comment so that first example
is the default 3072-bit RSA.
--
3072-bit RSA is widely considered to be 128-bit-equivalent security.
This is a sensible default in 2017.
Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Gbp-Pq: Topic update-defaults
Gbp-Pq: Name 0015-gpg-default-to-3072-bit-RSA-keys.patch
Diffstat (limited to 'doc/wks.texi')
| -rw-r--r-- | doc/wks.texi | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/wks.texi b/doc/wks.texi index f9b1a0c14..f17497f9b 100644 --- a/doc/wks.texi +++ b/doc/wks.texi @@ -301,11 +301,11 @@ the submission address: The output of the last command looks similar to this: @example - sec rsa2048 2016-08-30 [SC] + sec rsa3072 2016-08-30 [SC] C0FCF8642D830C53246211400346653590B3795B uid [ultimate] key-submission@@example.net bxzcxpxk8h87z1k7bzk86xn5aj47intu@@example.net - ssb rsa2048 2016-08-30 [E] + ssb rsa3072 2016-08-30 [E] @end example Take the hash of the string "key-submission", which is |