News for hackers. Stuff that matters.

A comment on Bruce Schneier has changed his PGP key to 4096 bits. Parent comment

Re:Bruce Schneier has changed his PGP key to 4096 bits by drdaeman on Thursday September 12, 2013 @07:30PM (#6377669)
> normal people use 2048bit RSA either directly (SSH keys, Website Certs, VPNs)

Any reason for that?

[Almost] all of my SSH and TLS (be it HTTPS or OpenVPN) keys are 4096 bits long.

I wasn't woried about TLAs with supercomputers snooping on my wires, just heard that 4096 bit RSA keys are considered more secure than 2048 while not sacrificing performance much, so I just didn't have the reason to specify lower size.

[ Parent | on HN ]
Re:Bruce Schneier has changed his PGP key to 4096 bits by reeses on Friday September 13, 2013 @12:02AM (#6378523)
When a lot of these tools were first implemented, to get enough entropy, you would have to type and move your mouse for a long time to generate a 1024-bit key. I remember really, really hating that process.

Now, you kids these days with your entropy pools and PRNGs in your CPUs because you had an empty spot on the tape-out...get off my lawn!

[ Parent | on HN ]
Re:Bruce Schneier has changed his PGP key to 4096 bits by aroch on Thursday September 12, 2013 @08:07PM (#6377792) 

    Any reason for that?
OpenSSL's default keylength is 2048? ssh-keygen uses 2048 by default.
[ Parent | on HN ]