• tias@discuss.tchncs.de
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    14 hours ago

    Fun fact: most implementations actually always use 65537 as the public RSA key (17 was more common earlier, but rare now). It makes computations easier and faster, and doesn’t affect security much as long as you pick a hard-to-guess private key. The modulus is the thing that varies in public certificates.

    • zener_diode@feddit.org
      link
      fedilink
      arrow-up
      16
      ·
      14 hours ago

      This is only partially true.

      RSA public keys consist of two parts:

      1. The exponent e, which is usually 65537, for the reasons you described.
      2. The modulus n, the product of the two primes used for generating an RSA keypair.

      If the public key were always completely the same, then there would be no point in making different private keys.

    • spankysalmon@fedinsfw.app
      link
      fedilink
      English
      arrow-up
      5
      ·
      14 hours ago

      Isn’t RSA wholly deprecated for like… years by now?

      Oh looked it up. It’s ssh-rsa that’s deprecated because of SHA-1, and NIST wants to phase out RSA-2048 by 2030.