clong / DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices
MIT License
4.59k stars 979 forks source link

Recomended SSH key size is too small #840

Closed zwinnerman-fleetdm closed 1 year ago

zwinnerman-fleetdm commented 2 years ago

Please verify that you are building from an updated Master branch before filing an issue.

Description of the issue:

The recomended SSH key size is 2048 according to this https://www.detectionlab.network/deployment/aws/. This is below the new default of 3072 and most recomend 4096 for RSA keys. Better would be to use ed25519 which both produces smaller keys and is more resistant to attacks.

See https://wiki.archlinux.org/title/SSH_keys#Ed25519 for more info.

Link to Gist Containing Build Logs:

clong commented 1 year ago

Updated the docs