Re: RSA default key size of 2048 bits too large for low-spec systems

2017-06-23 Thread Brent Roman
Hi Matt, I like the -R option and am already using it to eliminate the need to generate keys on the initial system boot. However, I still generate a public/private key pair for each user the first time they log in. (which could delay that by many tens of minutes for the 2048 bit key) Maybe I

Re: RSA default key size of 2048 bits too large for low-spec systems

2017-06-23 Thread Matt Johnston
Hi Brent, I'll see about improving the visibility of the default key sizes in options.h and also dropbearkey's printout. I changed to 2048 because 1024 is likely to become breakable within the next few years, it's best to have secure defaults if systems are going to remain un-updated for that