Christian Weisgerber wrote:
> Thomas 'PointedEars' Lahn <use...@PointedEars.de> wrote:
>> a [1024 bit] DSA key [AFAIK ssh-keygen(1) cannot do better],
>
> ... because older versions of FIPS 186 didn't allow longer DSA keys.
Exactly.
#v+
SSH-KEYGEN(1) BSD General Commands Manual SSH-KEYGEN(1)
[…]
-b bits
Specifies the number of bits in the key to create. For RSA
keys, the minimum size is 768 bits and the default is 2048
bits. Generally, 2048 bits is considered sufficient. DSA keys
must be exactly 1024 bits as specified by FIPS 186-2. For
ECDSA keys, the -b flag determines the key length by selecting
from one of three elliptic curve sizes: 256, 384 or 521 bits.
Attempting to use bit lengths other than these three values for
ECDSA keys will fail.
[…]
BSD November 15, 2012 BSD
#v-
(BTW, that is from Debian GNU/Linux.)