<div dir="ltr"><div dir="ltr"><br><div class="gmail_quote"><div dir="auto"><div class="gmail_quote">
* We will NO LONGER sign RSA or DSA 1024b keys (or shorter). Obsolete.<br>
* We will NOT sign RSA 2048b keys without expiration dates or<span class="gmail_default" style="font-family:georgia,serif"> with </span>expiration dates beyond 2020.<br>
* Use RSA 4096 <span class="gmail_default" style="font-family:georgia,serif">or ed25519 </span>for gpg2 --gen-key<br>
<br>
Notes<br>
* If concerned about well-capitalized massive factoring dictionaries,<br>
subtract a small multiple of 8 bits to get a size that is not standard<br>
and thus won't be dictionaried.<br>
* Alas the one trustworthy ECC curve,  ed25519, is supported only in<br>
GPG 2.1.7+ (gpg2)<span class="gmail_default" style="font-family:georgia,serif">, but if you have recent Ubuntu you you can use it now.</span></div><div class="gmail_quote"><span class="gmail_default" style="font-family:georgia,serif">  See <a href="https://nickhu.co.uk/posts/2016-09-03-curvy-gpg/">https://nickhu.co.uk/posts/2016-09-03-curvy-gpg/</a> for instructions  <br></span></div><div class="gmail_quote"><span class="gmail_default" style="font-family:georgia,serif">GPG2 gives a warning that it's not yet standardized so i'm considering it still somewhat expriemental ... i'm going to try a 10y expiring on this </span><br></div><div class="gmail_quote"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Announce mailing list<br>
<a href="mailto:Announce@blu.org" target="_blank">Announce@blu.org</a><br>
<a href="http://lists.blu.org/mailman/listinfo/announce" rel="noreferrer" target="_blank">http://lists.blu.org/mailman/listinfo/announce</a><br>
</div></div>
</div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Bill Ricker<br><a href="mailto:bill.n1vux@gmail.com" target="_blank">bill.n1vux@gmail.com</a><div><a href="https://www.linkedin.com/in/n1vux" target="_blank">https://www.linkedin.com/in/n1vux</a> <br></div></div></div></div></div>