On Monday 09 October 2006 16:59, Remy Blank wrote: > DSA keys are always 1024 bits, as this is mandated by the standard. RSA > keys can have variable length. From "man ssh-keygen": > > -b bits > Specifies the number of bits in the key to create. For RSA keys, > the minimum size is 768 bits and the default is 2048 bits. Gen- > erally, 2048 bits is considered sufficient. DSA keys must be > exactly 1024 bits as specified by FIPS 186-2. > > Another argument in favor of RSA is mentioned in the PuTTY FAQ: > > http://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#faq-dsa > > Personally, I use RSA keys because I want to use a 2048 bit key length.
Blast! I now need to reconsider my whole keying strategy. :-( Thank you Remy for a quick and succinct response. -- Regards, Mick
pgpsSFx8p3j6n.pgp
Description: PGP signature
