4 ms·
For new keys, 4096 is preferred.
by kingkilr 13y ago
For new keys, 4096 is preferred.
- tptacek 13y agoI don't think it's that simple. A 4096 bit key is extremely unlikely to get you fewer bits of security than a 2048 bit key. But the thing that makes 2048 bit keys a realistic threat is likely to make the "preference" be for something other than RSA entirely.
- sdevlin 13y agoIf 2048-bit RSA is vulnerable, then RSA is probably toast.
- makomk 13y agoI know some of the CAs are using 4096-bit keys for their long term signing keys, but those are going to be in use for over a decade and are a major target. Everyone else seems to use 2048-bit.