From fdff5ecd437baa4562fae1338de04c91027b8757 Mon Sep 17 00:00:00 2001 From: zzz <zzz@mail.i2p> Date: Sun, 20 Nov 2016 16:32:38 +0000 Subject: [PATCH] Router: Change default family sig type to EdDSA --- router/java/src/net/i2p/router/crypto/FamilyKeyCrypto.java | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/router/java/src/net/i2p/router/crypto/FamilyKeyCrypto.java b/router/java/src/net/i2p/router/crypto/FamilyKeyCrypto.java index f1bfe2063a..7f0c2962d1 100644 --- a/router/java/src/net/i2p/router/crypto/FamilyKeyCrypto.java +++ b/router/java/src/net/i2p/router/crypto/FamilyKeyCrypto.java @@ -62,8 +62,10 @@ public class FamilyKeyCrypto { private static final int DEFAULT_KEY_VALID_DAYS = 3652; // 10 years // Note that we can't use RSA here, as the b64 sig would exceed the 255 char limit for a Mapping // Note that we can't use EdDSA here, as keystore doesn't know how, and encoding/decoding is unimplemented - private static final String DEFAULT_KEY_ALGORITHM = SigType.ECDSA_SHA256_P256.isAvailable() ? "EC" : "DSA"; - private static final int DEFAULT_KEY_SIZE = SigType.ECDSA_SHA256_P256.isAvailable() ? 256 : 1024; + //private static final String DEFAULT_KEY_ALGORITHM = SigType.ECDSA_SHA256_P256.isAvailable() ? "EC" : "DSA"; + //private static final int DEFAULT_KEY_SIZE = SigType.ECDSA_SHA256_P256.isAvailable() ? 256 : 1024; + private static final String DEFAULT_KEY_ALGORITHM = "EdDSA"; + private static final int DEFAULT_KEY_SIZE = 256; private static final String KS_DIR = "keystore"; private static final String CERT_DIR = "certificates/family"; private static final String CRL_DIR = "crls"; -- GitLab