Re: [Ejbca-develop] More on 4096 bit keys

[Ken G. <kgu...@te...>]

On Monday 07 June 2004 01:33 am, Tomas Gustavsson wrote:
> In the released 3.0 there is a JBoss tuning that is supposed to
> increase timeout. It probably only works on versions > 3.2.4 though.
> The problem with command-line is Sun-Java related though.
>
> >openssl genrsa -des3 -out ca.key 4096
>
> Did you use different keysize in 1, 2, 3 and 4?

No.  Same command each time.  See man 4 random regarding collection of=20
"environmental noise" and creation of "entropy pool".  Per=20
$JAVA_HOME/jre/lib/security/java.security, Java is using /dev/random as=20
source of seed data.  At least on my FreeBSD boxes.

My suspicion is that the different times may relate to the quality of=20
the entopy pool, although I admit to not having read the entire man=20
page (yet, anyways....), so could be completely ou tin left field on=20
this one...

--=20
Best regards,

Ken Gunderson
GPG Key-- 9F5179FD

"Freedom begins between the ears."      -- Edward Abbey