[Bug 237391] Re: ssh-keygen should default to dsa not rsa

Colin Watson cjwatson at canonical.com
Fri Jun 6 10:40:24 BST 2008


Neal said: "I agree that using a longer default key length in RSA (and
in DSA also) is a good idea at this point." I agree on RSA, but note
that keys longer than 1024 bits are not permitted by the DSS. From past
conversations with people who have better Real Cryptographer credentials
than I, I understand that this is because there are other avenues of
attack that do not scale with key size (at least not in the same way),
so there's little point in longer keys.

-- 
ssh-keygen should default to dsa not rsa
https://bugs.launchpad.net/bugs/237391
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.



More information about the Ubuntu-server-bugs mailing list