[pacman-dev] [PATCH] pacman-key: change signing key to RSA4096

Allan McRae allan at archlinux.org
Mon Jun 15 09:19:10 UTC 2020


RSA2048 may have been fine when this was written many moons ago, but time
this has a bump.

Signed-off-by: Allan McRae <allan at archlinux.org>
---
 scripts/pacman-key.sh.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/pacman-key.sh.in b/scripts/pacman-key.sh.in
index 3e952c1b..ccfd1b96 100644
--- a/scripts/pacman-key.sh.in
+++ b/scripts/pacman-key.sh.in
@@ -148,7 +148,7 @@ generate_master_key() {
 	"${GPG_PACMAN[@]}" --gen-key --batch <<EOF
 %echo Generating pacman keyring master key...
 Key-Type: RSA
-Key-Length: 2048
+Key-Length: 4096
 Key-Usage: sign
 Name-Real: Pacman Keyring Master Key
 Name-Email: pacman at localhost
-- 
2.27.0


More information about the pacman-dev mailing list