Difference between revisions of "Key length"
Jump to navigation
Jump to search
↑ https://support.apple.com/en-us/HT210176
| Line 5: | Line 5: | ||
* 512 bits | * 512 bits | ||
* 256 bits: [[ed25519]] | * 256 bits: [[ed25519]] | ||
| + | |||
| + | == [[RSA]] == | ||
| + | * [[macOS 10.15]] (2019) requires that [[TLS]] server certificates and issuing CAs using RSA keys must use [[key size]]s greater than or equal to 2048. <ref>https://support.apple.com/en-us/HT210176</ref> | ||
== [[OpenSSH]] == | == [[OpenSSH]] == | ||
[[OpenSSH 7.6]] (October 2017) | [[OpenSSH 7.6]] (October 2017) | ||
* Refuse [[keys length]] <1024 bits in length and improve reporting for keys that do not meet this requirement. | * Refuse [[keys length]] <1024 bits in length and improve reporting for keys that do not meet this requirement. | ||
| − | |||
| − | |||
| − | |||
* [[OpenSSH 4.2]]: September 1, 2005 https://www.openssh.com/txt/release-4.2 | * [[OpenSSH 4.2]]: September 1, 2005 https://www.openssh.com/txt/release-4.2 | ||
Revision as of 10:19, 26 October 2021
- 2048 bits
- 1024 bits
- 512 bits
- 256 bits: ed25519
Contents
RSA
- macOS 10.15 (2019) requires that TLS server certificates and issuing CAs using RSA keys must use key sizes greater than or equal to 2048. [1]
OpenSSH
OpenSSH 7.6 (October 2017)
- Refuse keys length <1024 bits in length and improve reporting for keys that do not meet this requirement.
- OpenSSH 4.2: September 1, 2005 https://www.openssh.com/txt/release-4.2
- Increase the default size of new RSA/DSA keys generated by
ssh-keygenfrom 1024 to 2048 bits.
- Increase the default size of new RSA/DSA keys generated by
Related
- Openssh client:
Invalid key lenghtconnecting to a Cisco device - RSA, Ed25519
ssh-keygen
See also
- Public key cryptography,
private key,public key,key length,ssh-keygen,ssh-keyscan, Root certificate, KEX, Generate a key - OpenSSH (changelog):
/etc/ssh/sshd_config|/etc/ssh/ssh_config|~/.ssh/|openSSL | sshd logs|sftp|scp|authorized_keys|ssh-keygen|ssh-keyscan|ssh-add|ssh-agent|ssh|Ssh -O stop|ssh-copy-id|CheckHostIP|UseKeychain, OpenSSF - Public-key cryptography: RSA, DSA, ECDSA, EdDSA (Ed25519), AES, RSA Conference, hash,
pkeyutl, Signature, key length, Easyrsa, OAEP, Ron Rivest, Adi Shamir, Leonard Adleman
Advertising:
