mozilla/browserid — Issue #600: Need to decide on algorithm and keylength for domain key
Author: lloyd
Created: 2011-11-17 23:42:04+00:00
State: open

currently our domain keys are all RSA 1024. We should decide if we want to stick with RSA or move to DSA and what the keylength should be. I've run the numbers and here is the cost on an example machine:

RSA2048 - certification 419ms - verification 137ms

DSA2048 - certification 69ms - verification 248ms

These times are on a 2.5ghz linux box under node 0.6.0.

Given this, I suggest DSA 2048.

/cc @benadida @mmayo