On Mon, Apr 12, 2021 at 10:53:46PM +0100, Jeremy Harris via Exim-users wrote: > On 12/04/2021 21:39, The Doctor via Exim-users wrote: > > Does Exim support 8192 bit SSL keys? > > Nothing works until it's been tried, and I've not > personally tested 8k (or even 4k) keys in certs. > The regression tests use 2k key for RSA > and (it looks like) a nistp521 key for EC. > > I can't comment on other EC variants, but apart > from buffer sizes I'd expect the only limitations > to be in the crypto library in use. > > > I agree with Viktor, use EC. Until we hit > the cryptapocalypse they are much preferred. > > Ed25519 works for DKIM keys, though you need > to worry whether the MTAs you talk to also > support them. You can dual-sign with an RSA > and an EC key. > The tests use 512b (I know; deprecated...) and 1k > keys for DKIM/RSA, and Ed25519 for DKIM/EC.
4K keys do work! > -- > Cheers, > Jeremy > > -- > ## List details at https://lists.exim.org/mailman/listinfo/exim-users > ## Exim details at http://www.exim.org/ > ## Please use the Wiki with this list - http://wiki.exim.org/ -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b A consequence-free mentality brings the most severe consequences. -unknown -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
