diff options
| author | Jun Aruga <jaruga@redhat.com> | 2026-05-21 15:56:46 +0100 |
|---|---|---|
| committer | git <svn-admin@ruby-lang.org> | 2026-05-30 08:47:04 +0000 |
| commit | 6fa38d36257dea94dd1e68f8e6447e1863854848 (patch) | |
| tree | 65be6dfbe219a72066999eaf45d72cd188c87715 /enc | |
| parent | ddb5055d961d970aded287cfebd07b78efee3ca7 (diff) | |
Replace RSA keys for intermediate_key and ee_key with RSA 4096-bit keys
rsa-1.pem and rsa-2.pem. At least RSA 2048-bit keys are required for signing
and encryption in FIPS.
SP 800-131A Rev. 2
* 3. Digital Signatures
* 6. Key Agreement and Key Transport Using RSA
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf
https://github.com/openssl/openssl/blob/71943544885ff364a10bcc5ffc62d0e651c9a021/providers/common/securitycheck.c#L72-L73
```
$ openssl rsa -in test/openssl/fixtures/pkey/rsa-1.pem -text -noout | head -1
Private-Key: (4096 bit, 2 primes)
$ openssl rsa -in test/openssl/fixtures/pkey/rsa-2.pem -text -noout | head -1
Private-Key: (4096 bit, 2 primes)
```
https://github.com/ruby/openssl/commit/f130312442
Diffstat (limited to 'enc')
0 files changed, 0 insertions, 0 deletions
