Joe Abley wrote:

On 6-Oct-2006, at 06:01, Robert Loomans wrote:

In section 3.8 the draft uses normative language to specify key
sizes. Should it not instead specify *minimum* key sizes, or is it an
explicit goal to specify an absolute size? (Would it be bad, for
example, if I chose to use a 4096 bit key instead of the 2048 bit key
I SHOULD use?)

I believe there are concerns about the overhead of using unnecessarily
larger keys....

I'd like to understand that concern a little better.

I had the same concern a while ago - namely that 2048 should be a minimum. At that time Stephen Kent pointed out that on the longer term he would prefer to move to EC-DSA instead of RSA with larger key sizes.

Regards,
Robert




_______________________________________________
Sidr mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/sidr

Reply via email to