DSA key length

Janusz A. Urbanowicz alex@FUCKUP.fantastyka.net
Thu Jul 25 11:18:44 2002

> Alright, thanks a lot for all the help.  I understand all this much better
> how.
> I still don't understand the 1024-bit limit on DSA.
> I've read that DSA has similar strength as RSA and ElGamal, that the key
> shouldn't be too small and so on.
> Why is 1024 the limit for DSA when people recommend 2048 for RSA and
> ElGamal?

Go read Applied Crypto.

DSA (Digital Signature Algorithm) can have keys of any length.

DSS (Digital Signature Standard) utilzes DSA and sets keylength to 1024.