Re: [Ejbca-develop] More on 4096 bit keys

[Ken G. <kgu...@te...>]

On Monday 07 June 2004 12:47 am, Tomas Gustavsson wrote:
> You don't say whan 1, 2, 3 and 4 below means?
> Note though, that EJBCA creates two keypairs when creating a new CA,
> so longer time than generating a single keypari is expected.

You're correct in that it wasn't an "even" test.  I created some OpenSSL=20
generated 4096 bit keys to provide general feel.  Once the keys are=20
made, singing the cert part is trivial. =20

I ran a small in house CA once using OpenSSL on a 300 MHz Celeron=20
machine and could use 4096 bit keys, so I don't think this is strictly=20
a hardware horsepower issue, despite that the Xeon machine can handle=20
it while the PIII cannot.  Suspect it has something to do with=20
additinal time required for entroy gathering and key generation=20
resulting in a Java timeout.  I'm not a Java programmer though, so I=20
could be way off base here.  I also don't have a subscription to the=20
JBoss docs.  Maybe there is some config variable that needs tuning to=20
allow for longer time?

--=20
Best regards,

Ken Gunderson
GPG Key-- 9F5179FD

"Freedom begins between the ears."      -- Edward Abbey