Yeah, you're right. I was somehow assuming RSA. For anyone not familiar with this, 256-bit ECDSA is considered to have the same security as 3072-bit RSA. A lot

Yeah, you're right. I was somehow assuming RSA. For anyone not familiar with this, 256-bit ECDSA is considered to have the same security as 3072-bit RSA. A lot of large shops use 2048-bit keys, and GPG folks think 4096 is "unnecessary"[1]. So 3072 is a more-than-decent strength by today's standards. [1]: https://gnupg.org/faq/gnupg-faq.html#not_a_bad_idea_just_unnecessary https://gnupg.org/faq/gnupg-faq.html#not_a_bad_idea_just_unn...