openssl/project

Create a proposal for making various minimum/maximum key sizes configurable

开放

#809 创建于 2024年8月13日

 (3 条评论) (0 个反应) (0 位负责人) (1 个派生)auto 404
help wanted

仓库指标

星标
 (3 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

https://github.com/openssl/openssl/pull/25094 suggested changing the minimum RSA key size from 512 to 1024 bits.

This will break some use cases - most likely testing. On the other hand 1024 bits is not secure sufficiently anyway so eventually only 2048 bit and above keys should be generated. However this would break even more legacy use cases. To allow them but not allow generating insecure keys by default these minimum (and possibly maximum) key sizes should be made configurable.

A proposal for the configuration needs to be created.

贡献者指南