• tias@discuss.tchncs.de
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      14 hours ago

      Fun fact: most implementations actually always use 65537 as the public RSA key (17 was more common earlier, but rare now). It makes computations easier and faster, and doesn’t affect security much as long as you pick a hard-to-guess private key. The modulus is the thing that varies in public certificates.

      • zener_diode@feddit.org
        link
        fedilink
        arrow-up
        16
        ·
        14 hours ago

        This is only partially true.

        RSA public keys consist of two parts:

        1. The exponent e, which is usually 65537, for the reasons you described.
        2. The modulus n, the product of the two primes used for generating an RSA keypair.

        If the public key were always completely the same, then there would be no point in making different private keys.

      • spankysalmon@fedinsfw.app
        link
        fedilink
        English
        arrow-up
        5
        ·
        14 hours ago

        Isn’t RSA wholly deprecated for like… years by now?

        Oh looked it up. It’s ssh-rsa that’s deprecated because of SHA-1, and NIST wants to phase out RSA-2048 by 2030.