3 ms·
> 4096 SSL keys. Why do you say this? You should keep in mind the following: 1. Most TLS vulnerabilities occur due to design or implementation flaws, not due
by throwawaymath 8y ago
> 4096 SSL keys.
Why do you say this? You should keep in mind the following:
1. Most TLS vulnerabilities occur due to design or implementation flaws, not due to insufficient key size (in particular side channel attacks of various flavors);
2. RSA is not the only algorithm which can be used for TLS. In fact, it’s not even the most advisable one. You can also use authenticated encryption via AES-GCM or Curve25519. These are safer. “4096 bit keys” are not a coherent recommendation for these algorithms, because security doesn’t correlate with key size;
3. You generally want to choose libraries which are secure by default and don’t require (or encourage!) developers to make decisions about details like key sizes. Choose an algorithm if you kust (avoid RSA!), but limit further decision making.