Harness SSL and JSSE: Key Size Control
Aged Bridge, Yulong River, Yangshuo, China Why Key Size Concerns The key size is an important security parameter to determine the strength of cryptography algorithms. For example, RSA keys with fewer than 1024 bits are considered forgeable. If RSA keys less than 1024 bits are used in X.509 certificates, the private keys used in these certificates can be derived and could allow an attacker to duplicate the certificates and use them fraudulently to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. On August 14, 2012, Microsoft offered an update to Windows that restricts the use of certificates with RSA keys less than 1024 bits in length. As of October 9, 2012, the update is delivered via automatic update through the Microsoft update service. Microsoft recommends that customers apply the update at the earliest opportunity. Since JDK 7u12, RSA keys less than 1024 bits in X.509 certificates are disabled. This...