ScFileStorage generated 2048 key has only 2047 bit

Discussion of open issues, suggestions and bugs regarding network security and data protection solution - SecureBridge
Post Reply
tam
Posts: 15
Joined: Wed 24 Nov 2010 08:07
Location: Germany

ScFileStorage generated 2048 key has only 2047 bit

Post by tam » Fri 22 Apr 2022 15:02

Hi.

I'm using Delphi 11.0 and SecureBridge 10.0.1 on Windows 10 64 bit.

When I generate a 2048 bit key it's actually only 2027 bit long.

ScFileStorage tab "Keys"-> New -> key1 -> RSA -> 2048 -> Generate -> Export private key -> key1.ssl

Code: Select all

ssh-keygen -l -f key1.ssl
2047 SHA256:ILaFe1PngtvmbGgr/W7rNLwxxOZH4jpMC13FejrL45E no comment (RSA)

tam
Posts: 15
Joined: Wed 24 Nov 2010 08:07
Location: Germany

Re: ScFileStorage generated 2048 key has only 2047 bit

Post by tam » Tue 26 Apr 2022 13:56

Anyone please?

I need a solution soon, because our business partner only accepts 2048 bit keys.

dzhanhira
Devart Team
Posts: 239
Joined: Mon 26 Oct 2020 13:49

Re: ScFileStorage generated 2048 key has only 2047 bit

Post by dzhanhira » Wed 27 Apr 2022 10:15

Hi Tam,

Thanks for contacting us and sorry for the delay, which is caused due to the Russian aggression into Ukraine.

So let me kindly clarify:
When generating a key, the last bit can be set to 0, and then the key size will be one bit less.
SecureBridge permits the generation and use of such keys.

To solve the issue, please regenerate the key, if it's necessary, do it several times until it is exactly 2048 bits.

tam
Posts: 15
Joined: Wed 24 Nov 2010 08:07
Location: Germany

Re: ScFileStorage generated 2048 key has only 2047 bit

Post by tam » Wed 27 Apr 2022 13:28

Hey dzhanhir,

thanks for your help, it's working now.

But I think it would be better to avoid creating any other key size than selected within the ScFileStorage.

dzhanhira
Devart Team
Posts: 239
Joined: Mon 26 Oct 2020 13:49

Re: ScFileStorage generated 2048 key has only 2047 bit

Post by dzhanhira » Tue 03 May 2022 11:42

Dear Tam,

Thanks for the suggestion!

Kindly be informed that we will consider this feature in one of the following builds.

Post Reply