Skip to content
Request an audit

‹ All findings

RsaVerifyOptimized sets the size of the key to 1024 bits, which is unsafe

Crit/HighKeyring Credentials·Three Sigma · Zero-knowledge compliance · 10th July, 20243S-Keyring-M01

Description

RSA signatures rely on the size of the key for higher safety assurances. As computational power advances, it becomes possible to brute force signatures up to more bits.

This article indicates keys up to 829 bits have been cracked, which is dangerously close to the hardcoded 1024 bits.

The original RsaVerifyOptimized repository recommends setting a key size of at least 2048 bits.

Recommendation

Update the key size to be 2048.

Status

Addressed in #02b0fa2.