diff options
author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2007-10-12 23:22:26 +0300 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2007-10-12 23:22:26 +0300 |
commit | 230c4e8d2085e0bd91d3312f1850def7f1b810f4 (patch) | |
tree | 737c2618bd6fab654e983b81993737561ec0e6f7 /doc | |
parent | 9d9eb34b24ae21f7b21b97aa2aa260496efcd6d4 (diff) | |
download | gnutls-230c4e8d2085e0bd91d3312f1850def7f1b810f4.tar.gz |
Updated documentation.
Diffstat (limited to 'doc')
-rw-r--r-- | doc/gnutls.texi | 30 |
1 files changed, 21 insertions, 9 deletions
diff --git a/doc/gnutls.texi b/doc/gnutls.texi index b3443b5d68..671bf2df1f 100644 --- a/doc/gnutls.texi +++ b/doc/gnutls.texi @@ -569,6 +569,7 @@ differences of these protocols are minor. Older protocols such as * The TLS Alert Protocol:: * The TLS Handshake Protocol:: * TLS Extensions:: +* Selecting cryptographic key sizes:: * On SSL 2 and older protocols:: @end menu @@ -1032,42 +1033,53 @@ and public key algorithms based on the most conservative values of @xcite{SELKEY Those can be used to generate certificates with appropriate key sizes as well as parameters for Diffie Hellman and SRP authentication. -@multitable @columnfractions .25 .25 .25 +@multitable @columnfractions .15 .20 .20 .20 -@item Symmetric key size +@item Year +@tab Symmetric key size @tab RSA key size, DH and SRP prime size @tab ECC key size -@item 56 +@item 1982 +@tab 56 @tab 417 @tab 105 -@item 61 +@item 1988 +@tab 61 @tab 566 @tab 114 -@item 72 +@item 2002 +@tab 72 @tab 1028 @tab 139 -@item 82 +@item 2015 +@tab 82 @tab 1613 @tab 173 -@item 92 +@item 2028 +@tab 92 @tab 2362 @tab 210 -@item 101 +@item 2040 +@tab 101 @tab 3214 @tab 244 -@item 109 +@item 2050 +@tab 109 @tab 4047 @tab 272 @end multitable +The first column provides an estimation of the year until these parameters +are considered safe and the rest of the columns list the parameters for the +various algorithms. @node On SSL 2 and older protocols @section On SSL 2 and Older Protocols |