Geoff,
So Roque let me ask you directly, since you have chosen to raise this topic at this point: Why is David's analysis unacceptable to you? What arguments can you advance in support of use of 1024-bit RSA keys in this profile?
Geoff,I am sorry not to remmember that discussion, and thanks for the clarification. My intention was to show that there was, in my view, an inconsistency between the CP and the CERT profile. I did not give the issue as much thought as David in his message, just thinking about the typical discussion about key length size vs CPU power and the idea that some calculations may be done in small devices particularly thinking on the work that CSI WG is doing using RPKI Cert profile document with local trust-anchors following RFC3971.
If there is consensus on 2048bits min key size, should we ask for the CP to reflect this?
Thanks again, Roque
Geoff On 21/07/2009, at 2:05 AM, Roque Gagliano wrote:-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear group,In CP document section 6.1.5. Key sizes it is stated: "For RIR and IANA certificates, the required RSA key size is 2048 bits. For all other certificates, the RSA keys is 2048 or 1024 bits."In CERT profile document section 3.8 it states: "The key size MUST be a minimum size of 2048 bits.".I would like to modify both documents allowing a minimum size of 1024 bits.Regards, r. - ------------------------------------------------------------- Roque Gagliano LACNIC [email protected] GPG Fingerprint: E929 06F4 D8CD 2AD8 9365 DB72 9E4F 964A 01E9 6CEE -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkpklc0ACgkQnk+WSgHpbO5ziQCgqgrK6T0MBHsnGLI948hqNIft q4gAoN9TDGq9Z7jApNo4OaMsjhHVepY/ =bYe/ -----END PGP SIGNATURE----- _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
------------------------------------------------------------- Roque Gagliano LACNIC [email protected] GPG Fingerprint: E929 06F4 D8CD 2AD8 9365 DB72 9E4F 964A 01E9 6CEE
PGP.sig
Description: This is a digitally signed message part
_______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
