SLTechnology News&Howtos › IT Information ›

The openSUSE Linux repository uses a 4096-bit RSA key instead

Shulou Source: shulou.com Published: 2023-11-24 14:15:05 11月14日 Update

CTOnews.com January 26, openSUSE's Marcus Meissner announced that openSUSE Linux's RPM and repository signing keys are switching to a more powerful 4096-bit RSA key, providing better security for users.

The new RSA key will be applied to openSUSE Tumbleweed rolling distribution, as well as to openSUSE Leap, openSUSE Backports, and SLE (SUSE Linux Enterprise) repositories.

For openSUSE Tumbleweed, the new 4096-bit RSA key will be used starting with this week's snapshot. This means that if the user updates the Tumbleweed repository periodically, it will automatically upgrade to the new RSA key, which will be imported into RPM keyring.

According to Marcus Meissner, this transformation is necessary to meet current security recommendations. It is well known that the strength of 4096-bit keys is much higher than that of 2048-bit keys. However, a 4096-bit key takes up a lot of CPU resources during the handshake.

The GPG fingerprint of the new 4096-bit key is as follows:

Pub rsa4096/0x35A2F86E29B700A4 2022-06-20 [SC] [expires: 2026-06-19] Key fingerprint = AD48 5664 E901 B867051A B15F 35A2F86E29B7 00A4uid openSUSE Project Signing Key if you want to manually import users, please see the complete GPG key below:

-BEGIN PGP PUBLIC KEY BLOCK-Version: GnuPG v2.0.15 (GNU/Linux) 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=nMh8-END PGP PUBLIC KEY BLOCK-CTOnews.com learned that Meissner said that the openSUSE Leap system will switch to the new RSA key sometime in 2023 But no specific time frame was provided. Therefore, it is strongly recommended that you always keep your system and patch installations up to date.