Weak RSA key size (ARCH313)

Key dotnet.security.weak-rsa-key-size · Severity error · Category security · CWE CWE-326

RSA keys of 1024 bits or smaller are factorable with modern computing power. Use at least 2048 bits.

Incorrect

using var rsa = RSA.Create(1024);

Correct

using var rsa = RSA.Create(2048);

Fix

Set the RSA key size to at least 2048 bits (preferably 3072+ for new systems).