Yubico Forum
https://forum.yubico.com/

[PIV Manager] generate 4096bit keys for gen4 yubikeys
https://forum.yubico.com/viewtopic.php?f=12&t=2196
Page 1 of 1

Author:  My1 [ Wed Feb 03, 2016 1:35 am ]
Post subject:  [PIV Manager] generate 4096bit keys for gen4 yubikeys

well it was advertised that the yubikey4 (and the 4nano) offers 4096 bit keys.

but the key generation assisatant (which is surely a nice choice because your private key goes directly to the yubikey, (or at least it should)) doesnt offer 4096bit keys but for some or another really weird reason I can generate 1024 bit keys, even though those are REALLY bad and discouraged everywhere.

so might it be possible for the PIV Manager to make 4k keys?

Regards, My1

Author:  ChrisHalos [ Wed Feb 03, 2016 3:44 am ]
Post subject:  Re: [PIV Manager] generate 4096bit keys for gen4 yubikeys

NIST does not yet specify 4096 as a supported algorithm. Until that happens, a 4096 RSA option will not be added to the PIV Manager. The hardware itself is capable of 4096 (Docker uses 4096). OpenPGP also supports 4096 RSA.

http://nvlpubs.nist.gov/nistpubs/Specia ... 0-78-4.pdf

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/