Re: RSA default key size of 2048 bits too large for low-spec systems

2017-06-23 Thread Brent Roman
Hi Matt, I like the -R option and am already using it to eliminate the need to generate keys on the initial system boot. However, I still generate a public/private key pair for each user the first time they log in. (which could delay that by many tens of minutes for the 2048 bit key) Maybe I

Re: RSA default key size of 2048 bits too large for low-spec systems

2017-06-23 Thread Matt Johnston
Hi Brent, I'll see about improving the visibility of the default key sizes in options.h and also dropbearkey's printout. I changed to 2048 because 1024 is likely to become breakable within the next few years, it's best to have secure defaults if systems are going to remain un-updated for that

RSA default key size of 2048 bits too large for low-spec systems

2017-06-23 Thread Brent Roman
I recently upgraded some low power ARM9 systems from dropbear v0.52 to v2017.75 Everything went well until a system system tried to generate server keys on first boot. Then it hung while working to generate the default 2048 bit RSA key. Further investigation determined that it had not really