-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 * Bill Woodcock [2014-03-27 23:54]: > > On Mar 27, 2014, at 10:14 AM, Matthäus Wander > <matthaeus.wan...@uni-due.de> wrote: >> Here's a small statistic about RSA key lengths of 741,552 signed >> second-level domains (collected on 2014-01-27, counting KSK and >> ZSKs): >> >> 1024 bit: 1298238 2048 bit: 698232 1280 bit: 28441 4096 bit: >> 25326 512 bit: 8893 1536 bit: 385 > > Matthäus, do you have an easy way of separating out KSK from ZSK in > your statistics? FWIW, we’re currently doing 2048-bit KSK and > 1024-bit ZSK, but will shortly be transitioning to 4096-and-2048.
Yes, here you go: KSK: 2048 bit: 668634 1024 bit: 49861 4096 bit: 22646 512 bit: 2460 1280 bit: 812 1536 bit: 314 ZSK: 1024 bit: 1248377 2048 bit: 29598 1280 bit: 27629 512 bit: 6433 4096 bit: 2680 1032 bit: 310 Regards, Matt - -- Universität Duisburg-Essen Verteilte Systeme Bismarckstr. 90 / BC 316 47057 Duisburg -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTNZ9WAAoJEFaVlPYoUriue2oH/1ObggrmrVD/xhLkGJgrmJtT lVmiKufrAr4ega+xfdnpAGl3auYDmVzjBbjXUrmFRTb7vc0uuSIpBLpNWCHeFqN+ a3cQfltBquLGJ42vqo4t3PEbNspp+D/eP7ctqFj0qC3QALLgzrYLzBroH/TpErT6 050hqBkbwZghfVgZ37j+3hSfnRkr9gbpQSEstv95WVXQ3PKInz8JclE76fu8iG52 L0yRv2Iv23DF+2Zha0j3v7xP99mEVvnoifMk2KLKjFt+/VpTgKuzDxg/s/sMTRJp KIuneTmaaDqBwPB2d/9/ieuwjIm+O39Hu37qkWBwlmZGwv2D1bvRXBJCaoC7kvE= =FuVG -----END PGP SIGNATURE-----
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
