Re: CSR request, encryption level choice

Asymmetric key size used in certificates and symmetric key size used in
some of the algorithms are really two different things. 2048 bit keys
are equivalent to a 112 bit symmetric key.
https://en.wikipedia.org/wiki/Key_size#Asymmetric_algorithm_key_lengths
1024 bit keys were considered weak enough that the first proposal to get
rid of them was supposed to have all the major browsers stop accepting
them in 2013.




Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Nathan
Andelin
Sent: Monday, January 11, 2016 12:08 PM
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] CSR request, encryption level choice

If I understand correctly, most encryption algorithms recommend keys in
the
64-256 bit range. So I don't really understand the value of a 2048 bit
certificate key - let along larger...

Is it just marketing? Bigger is better?



On Mon, Jan 11, 2016 at 10:15 AM, Joe W Holt <joe.holt@xxxxxxxxxxx>
wrote:

Hey everyone, time to renew our cert. Notice that 4096 encryption
level is available on 7.1. With all the issues with encryption the
last couple years should I go ahead and renew with the higher level or

stick with 2048?

Research tells me most browsers support the higher level now but the
impact on the server to do the handshake is supposed to be 8 to 10

times larger.

Is the standard acceptance still at 2048? Any feedback appreciated.



***
Regards,
Joe W Holt
Sr Programmer/Developer
Jack Onofrio Dog Shows, LLC
405.427.8181
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
mailing list To post a message email: WEB400@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.