Page MenuHome GnuPG

Optional support for larger RSA key sizes
Closed, ResolvedPublic

Description

See attached. Added compile-time flag to support generating RSA key sizes larger than 4096.

Currently, several downstream distributions of GPG patch the GPG code in packages to support
generating RSA keys larger than 4096 bits. Mac OS X GPGTools, for example, patched to support
generating 8192 bit RSA keys.

The patch file I've submitted here adds a ./configure options called --enable-max-rsa-key-
size=SIZE.

When set to a value > 4096 and <= 65535, values above 16384 warn about incompatibility for RSA
keys larger than 16384. Values between 4096-65535 set secmem initial size to 128kB and the max
RSA key size in ask_keysize to whatever that value was.

When --enable-max-rsa-key-size is unset, set to 4096, or --disable'ed, GPG builds the same as it
does without this patch. (Same secmem init size of 32768, same max RSA key size of 4096.)

Details

Version
2.1

Event Timeline

Uploaded a new patch file - I missed a semicolon.

This has been discussed ad nauseam. Thus this will not be included.

werner claimed this task.
werner added a project: Won't Fix.