This is a discussion on Re: keys longer than 1024 bits - openssh ; Ian Becker wrote: > On Wed, Sep 13, 2006 at 02:09:38PM +0000, edbch wrote: >> Hello to all. >> First they pardon my bad English. >> I am attempted to generate keys longer than 1024 bits, but I am not ...
Ian Becker wrote:
> On Wed, Sep 13, 2006 at 02:09:38PM +0000, edbch wrote:
>> Hello to all.
>> First they pardon my bad English.
>> I am attempted to generate keys longer than 1024 bits, but I am not
>> obtaining. I perceived that in some machines this is possible and in others
>> It is some problem because of the operational system and some rule or
>> because of the version of ssh? In the machines that I cannot generate these
>> keys I use Gentoo Linux and OpenSSH_4.3p2, OpenSSL 0.9.7j. In that I can I
>> use OpenBSD and OpenSSH_4.1, OpenSSL 0.9.7d. The command to generate the
>> keys that I used is: ssh-keygen - t dsa - b the 2048 and message of error
>> that I received is: DSA keys must be 1024 bits.
>> Somebody knows to explain me because? Debtor since now.
> The ssh-keygen manpage says:
> -b bits
> Specifies the number of bits in the key to create. For RSA
> keys, the minimum size is 768 bits and the default is 2048
> Generally, 2048 bits is considered sufficient. DSA keys
> must be
> exactly 1024 bits as specified by FIPS 186-2.
> DSA keys must be exactly 1024 bits, according to the standard. If you
> want larger keys, you'll need to make RSA keys instead of DSA keys.
The fact of the version that run in OpenBSDs to allow bigger keys would be one bug? How this would place at risk my system?