[sr-dev] TLS key recommendation

[Henning Westerholt]

On Samstag, 10. Oktober 2009, Olle E. Johansson wrote:
> "
>     Try to avoid using keys larger then 1024 bytes. Large keys
> significantly slow down the TLS connection handshake, thus limiting
> the maximum SIP-router TLS connection rate.
> "
>
> Is this still a valid recommendation? Based on which size of CPU/system?

Hi Olle,

i'd think that today we should suggest a larger key. I've found this page:
http://www.keylength.com/en/compare/

according to it newer sources suggest a value of at least 1536 bits for 
asymmetric keys.

Regards,

Henning
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20091013/87c83cf0/attachment.htm>