From f57d3527d384d79b3af6a8926afabe23e6111961 Mon Sep 17 00:00:00 2001 From: larabr Date: Thu, 19 Aug 2021 17:53:06 +0200 Subject: [PATCH] Set default `config.minRSABits` to 2047 (#1392) Lower the default allowed RSA key size to ensure that (most) keys generated in v4 without WebCrypto are supported (see #1336). --- src/config/config.js | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/config/config.js b/src/config/config.js index 44579f5b1..1d56f6c98 100644 --- a/src/config/config.js +++ b/src/config/config.js @@ -104,10 +104,12 @@ export default { */ checksumRequired: false, /** + * Minimum RSA key size allowed for key generation and message signing, verification and encryption. + * The default is 2047 since due to a bug, previous versions of OpenPGP.js could generate 2047-bit keys instead of 2048-bit ones. * @memberof module:config - * @property {Number} minRSABits Minimum RSA key size allowed for key generation and message signing, verification and encryption + * @property {Number} minRSABits */ - minRSABits: 2048, + minRSABits: 2047, /** * Work-around for rare GPG decryption bug when encrypting with multiple passwords. * **Slower and slightly less secure**