Manojkumar Khotele
Manojkumar Khotele

Reputation: 1019

Doesn't this cipher suite mention key size - "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"?

I had assumed that the RSA key size would be 256. But it can't.

On trying to generate RSA keystore using keytool it gives error "rsa keys must be at least 512 bits long".

The command used is - "keytool -genkey -alias mydomain -keyalg RSA -keystore RSAkeystore.jks -keysize 256".

Upvotes: 0

Views: 1278

Answers (1)

Sander
Sander

Reputation: 26374

This cipher suite defines the key size for the AES algorithm but not for the RSA algorithm. The details about the cipher suite string you provided can be understood by reading RFC 4492

Upvotes: 1

Related Questions