Skip to content

Commit

Permalink
[protocol] Increases minimum and recommended RSA key size.
Browse files Browse the repository at this point in the history
  • Loading branch information
s-vincent committed Dec 20, 2018
1 parent 76cb76b commit c710aa7
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions fscp.txt
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,7 @@ Abstract
satisfy the key usage requirements or if it doesn't support pre-shared key
encryption.

The minimum RSA key size is 1024 bits. The RECOMMENDED RSA key size is 2048
The minimum RSA key size is 2048 bits. The RECOMMENDED RSA key size is 3072
bits or higher, with an exponent of 2^16 + 1. A strict implementation MAY
reject PRESENTATION messages with a low RSA key size.

Expand Down Expand Up @@ -501,7 +501,7 @@ Abstract
The underlying hash algorithm is SHA256. The salt len for PSS is the size
of the hash digest.

The minimum key size is 1024. The RECOMMENDED key size is 2048.
The minimum key size is 2048. The RECOMMENDED key size is 3072.

3.3. Key derivation

Expand Down
4 changes: 2 additions & 2 deletions libs/freelan/include/freelan/tools.hpp
Original file line number Diff line number Diff line change
Expand Up @@ -61,11 +61,11 @@ namespace freelan

/**
* \brief Generate a private key.
* \param size The size of the key. Defaults to 2048.
* \param size The size of the key. Defaults to 3072.
* \param prime A prime number to generate the key. Defaults to 17.
* \return The private key.
*/
cryptoplus::pkey::pkey generate_private_key(unsigned int size = 2048, unsigned int prime = 17);
cryptoplus::pkey::pkey generate_private_key(unsigned int size = 3072, unsigned int prime = 17);

/**
* \brief Generate a certificate request.
Expand Down

0 comments on commit c710aa7

Please sign in to comment.