Confirmed users
502
edits
Security/Guidelines/Key Management: Difference between revisions
Jump to navigation
Jump to search
Security/Guidelines/Key Management (view source)
Revision as of 22:01, 23 October 2014
, 23 October 2014Algorithm choice
Gdestuynder (talk | contribs) No edit summary |
Gdestuynder (talk | contribs) (Algorithm choice) |
||
| Line 151: | Line 151: | ||
[...] | [...] | ||
</source> | </source> | ||
As PGP keys are rarely renewed the minimum recommended settings are higher than other keys. If you follow a strict key renewal period of '''less than 2 years''', it is reasonable to use RSA 2048 bits or ECDSA 224 bits keys. | |||
=== Protection of user keys === | === Protection of user keys === | ||
| Line 161: | Line 163: | ||
Usage of machine keys should be registered in an inventory (a wiki page, LDAP, an inventory database), to allow for rapid auditing of key usage across an infrastructure. | Usage of machine keys should be registered in an inventory (a wiki page, LDAP, an inventory database), to allow for rapid auditing of key usage across an infrastructure. | ||
=== Expiration of keys === | === Expiration of keys === | ||