what are the sub keys

Jeffrey Walton noloader at gmail.com
Wed Mar 23 22:05:11 CET 2011


2011/3/23 Ingo Klöcker <kloecker at kde.org>:
> On Tuesday 22 March 2011, Jonathan Ely wrote:
>> Enigmail allows only 1024, 2048 and 4096. I have never heard of that,
>> but even still I would personally choose the largest key for the time
>> being till RSA becomes obsolete. Is there anything larger than 4096
>> since you mentioned values unknown to me?
>
> Let's see. There's 4097, 4098 and even 4099. And then there's 4100. ;-p
>
> IMHO all those discussions about key sizes are really pathetic. Stick
> with the defaults or educate yourself by reading the appropriate
> literature instead of starting one non-sensical discussion after the
> other on this mailing list. It should be rather obvious by now that key
> sizes above 2048 are mostly a matter of personal taste and bad
> judgement.
Bad judgement or best practice? Some folks must use a key with a 128
bit security level.

NIST SP 800-57:
http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57-Part1-revised2_Mar08-2007.pdf
ECRYPT2 Key Recommendations: http://www.ecrypt.eu.org/documents/D.SPA.13.pdf

Jeff



More information about the Gnupg-users mailing list