Weak RSA key size (ARCH6117)
Ce contenu n’est pas encore disponible dans votre langue.
Key ruby.security.weak-rsa-key-size · Severity warning · Category security · CWE CWE-326
Generating an RSA/DSA key below 2048 bits is no longer considered secure and can be factored by a sufficiently resourced attacker.
Incorrect
Section titled “Incorrect”key = OpenSSL::PKey::RSA.new(1024)Correct
Section titled “Correct”key = OpenSSL::PKey::RSA.new(3072)Generate RSA keys of at least 2048 bits (preferably 3072+).