Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Clarify that keys with sizes lower than what we recommend may still be imported

Browse source
This commit is contained in:
Vladimir Diaz 2016-01-28 17:46:28 -05:00
parent 6953fd758b
commit 3f1bb37560
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
tuf/keys.py
View file

@ -177,7 +177,10 @@ def generate_rsa_key(bits=_DEFAULT_RSA_KEY_BITS):
Although the PyCrypto crytography library called sets a 1024-bit minimum
key size, generate() enforces a minimum key size of 2048 bits. If 'bits' is
unspecified, a 3072-bit RSA key is generated, which is the key size
recommended by TUF.
recommended by TUF. These key size restrictions are only enforced for keys
generated within TUF. RSA keys with sizes lower than what we
recommended may still be imported (e.g., with
import_rsakey_from_encrypted_pem().
>>> rsa_key = generate_rsa_key(bits=2048)
>>> tuf.formats.RSAKEY_SCHEMA.matches(rsa_key)