Home
last modified time | relevance | path

Searched hist:"5 d5d7d0b1c038a6836be9f0b38585f5aa6a4dd01" (Results 1 – 1 of 1) sorted by relevance

/optee_os/keys/
H A Ddefault.pem5d5d7d0b1c038a6836be9f0b38585f5aa6a4dd01 Tue Apr 15 10:56:13 UTC 2025 Joakim Bech <joakim.bech@linaro.org> keys: increase default RSA key size to 4096 bits

Change the key size in your default key located at default.pem to 4096
bits.

New key has been created using this command:
openssl genrsa -out keys/default.pem 4096

Background:
GlobalPlatform, based on feedback from various national bodies such as
ANSSI, BSI, SOGIS, and NIST, has decided to designate RSA keys smaller
than 2048 bits as deprecated (see [1]).

Note:
This key is intended for testing purposes only. Therefore, it's not a
problem to publicly publish this, but it's important to remember to
change this if/when used in real products.

Link: https://globalplatform.org/specs-library/globalplatform-technology-cryptographic-algorithm-recommendations/ [1]

Signed-off-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>