Enable creation of 8192bit keys
Reported by Andreas | February 12th, 2011 @ 02:57 PM | in 2.0.18 (closed)
Although it is technicaly possible to work with 8192 bit GPG keys the creators of Gnupgp ship the sources with a hard coded limit of 4096 bit. If you want a larger GPG key than 4096 bit your are supposed to change the given limit yourself by changing one line of code in the file g10/keygen.c (At least in the 1.4.11 sources). That's it. After that you can create up to 8192 bit GPG keys.
Comments and changes to this ticket
-
Alex (via GPGTools) February 14th, 2011 @ 08:26 AM
- State changed from “new” to “open”
- Milestone cleared.
- Assigned user set to “Benjamin Donnachie”
- Importance changed from “High” to “”
-
Benjamin Donnachie February 14th, 2011 @ 10:33 AM
Invalid. Has been a part of MacGPG2 for some time.
Sent from my iPhone
-
Benjamin Donnachie February 14th, 2011 @ 02:47 PM
- State changed from “open” to “invalid”
From last release notes:
* Maximum key size increased to 8192 bits; not recommended and requires --expert command line option. -
Andreas February 14th, 2011 @ 07:03 PM
If it was part of MacGPG2 for some time, why was it dropped?
What does "requires --expert command line option" mean?GPGTools-20110214.dmg's version only offers up to 4096 bit, what is wrong with having the possibility to create larger secret keys?
gpg (GnuPG/MacGPG2) 2.0.17; Copyright (C) 2011 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.Please select what kind of key you want:
(1) RSA and RSA (default) (2) DSA and Elgamal (3) DSA (sign only) (4) RSA (sign only) Your selection? 1
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) -
Alex (via GPGTools) February 14th, 2011 @ 07:12 PM
Run
gpg2 --expert --gen-key
But before create the key google for the words gnupg, rsa, and 8192.
-
Benjamin Donnachie February 14th, 2011 @ 07:17 PM
Not dropped at all - try:
$ gpg2 --expert --gen-key gpg (GnuPG/MacGPG2) 2.0.17; Copyright (C) 2011 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.Please select what kind of key you want:
(1) RSA and RSA (default) (2) DSA and Elgamal (3) DSA (sign only) (4) RSA (sign only) (7) DSA (set your own capabilities) (8) RSA (set your own capabilities) Your selection? 1
RSA keys may be between 1024 and 8192 bits long.
What keysize do you want? (2048) -
-
Alex (via GPGTools) December 28th, 2011 @ 01:27 PM
- Milestone set to “2.0.18”
- Importance changed from “” to “”
-
Ultimate-GPG-Settings September 11th, 2014 @ 06:24 AM
- Importance cleared.
Raising GnuPG key size limits and making ideal .conf files.
Here is a link to a bash script that increases the GnuPG key size limit beyond 4096 bits.
The page also provides an ideal GnuPG .conf file.
https://gist.github.com/anonymous/3d928a0bcbb3ed92c454
https://tinyurl.com/ultgpgset
Please provide input and recommended changes.Is this method of replacing numbers in the source code appropriate?
How about the configuration files?Ultimate-GPG-Settings
-
steve September 14th, 2014 @ 07:02 PM
- Assigned user cleared.
- Importance set to “Low”
Hi there, not sure what you are requesting here. That we provide a GUI option for 8192bit keys?
If so, this will likely not happen. If you want to get into the discussion of the why's and how's, please contact gnupg users mailing list or devel mailing list at https://www.gnupg.org/documentation/mailing-lists.html
Their stance is that they do not want to make 4096bit keys the default in gnupg. GPG Keychain Access will default to 4096bit keys in the next release anyways. But I do not see 8192bit happen in the UI anytime soon. As indicated above Terminal offers this options for expert users.
For any further discussion please open a discussion on our support page: http://support.gpgtools.org
-
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Andreas
Luke Le
Mento
steve