Recommend 2048-bit like we do for RSA and reference the same document. Add a comment about 0.9.8c being awful. Do newer 0.9.8s support larger keys or does it need to be 1.0.1?