Re: [gentoo-user] Re: [OT] RSA Vs DSA keys for SSH authentication

[Mick]

On Monday 09 October 2006 16:59, Remy Blank wrote:

> DSA keys are always 1024 bits, as this is mandated by the standard. RSA
> keys can have variable length. From "man ssh-keygen":
>
>   -b bits
>     Specifies the number of bits in the key to create.  For RSA keys,
>     the minimum size is 768 bits and the default is 2048 bits.  Gen-
>     erally, 2048 bits is considered sufficient.  DSA keys must be
>     exactly 1024 bits as specified by FIPS 186-2.
>
> Another argument in favor of RSA is mentioned in the PuTTY FAQ:
>
>   http://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#faq-dsa
>
> Personally, I use RSA keys because I want to use a 2048 bit key length.

Blast! I now need to reconsider my whole keying strategy.  :-(

Thank you Remy for a quick and succinct response.

-- 
Regards,
Mick