generate 2048-bit RSA keys by default. 1024 bits is too weak. See p. 5 of http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-131A.pdf