Re: CSR request, encryption level choice

[Tim Bronski <tim.bronski@xxxxxxxxx>]

The current NIST recommendations for digital signature keys in user 
certificates is 2048 bits.

On 1/11/2016 7:57 PM, Aaron Bartell wrote:
> I am paraphrasing from what I believe was stated by Larry Bolhuis on
> Midrange-L.  In short, 2048 is sufficient and 4096 will consume (a lot?)
> more CPU to do the encryption/decryption.  He recommended going with 2048
> and that's what I've done this past year.
>
> Aaron Bartell
> litmis.com - Services for open source on IBM i
>
>
> On Mon, Jan 11, 2016 at 11:15 AM, Joe W Holt <joe.holt@xxxxxxxxxxx> wrote:
>
> > Hey everyone, time to renew our cert. Notice that 4096 encryption level is
> > available on 7.1. With all the issues with encryption the last couple years
> > should I go ahead and renew with the higher level or stick with 2048?
> > Research tells me most browsers support the higher level now but the impact
> > on the server to do the handshake is supposed to be 8 to 10 times larger.
> > Is the standard acceptance still at 2048?  Any feedback appreciated.
> >
> >
> >
> > ***
> > Regards,
> > Joe W Holt
> > Sr Programmer/Developer
> > Jack Onofrio Dog Shows, LLC
> > 405.427.8181
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> > list
> > To post a message email: WEB400@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/web400
> > or email: WEB400-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/web400.