2048 or 4096 for new keys? aka defaults vs. Debian

Peter Lebbing peter at digitalbrains.com
Sun Oct 27 13:20:26 CET 2013


On 27/10/13 13:11, Peter Lebbing wrote:
> A signature by a 2048-bit DSA key is twice as large as a signature by a 2048-bit
> RSA key, but offers the same order of strength.

Oops. I just read Werners message, and I had it reversed :). Taking a look at
RFC 4880, I see that a 2048-bit key has a 256-bit parameter q, and the signature
is two values mod q, so 512 bits. By the way, q limits the hash size.

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>



More information about the Gnupg-users mailing list