- stevesk@cvs.openbsd.org 2002/03/29 19:16:22

     [sshd.8]
     RSA key modulus size minimum 768; ok markus@

2 files changed, 9 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index 016e10973..cf13f1cf5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -13,6 +13,9 @@
    - markus@cvs.openbsd.org 2002/03/29 18:59:32
      [session.c session.h]
      retrieve last login time before the pty is allocated, store per session
+   - stevesk@cvs.openbsd.org 2002/03/29 19:16:22
+     [sshd.8]
+     RSA key modulus size minimum 768; ok markus@
 
 20020401
  - (stevesk) [monitor.c] PAM should work again; will *not* work with
@@ -8120,4 +8123,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.2010 2002/04/02 20:35:35 mouring Exp $
+$Id: ChangeLog,v 1.2011 2002/04/02 20:39:29 mouring Exp $
diff --git a/sshd.8 b/sshd.8
index b99708ef3..eb5c8f1da 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd.8,v 1.174 2002/03/26 11:34:49 markus Exp $
+.\" $OpenBSD: sshd.8,v 1.175 2002/03/29 19:16:22 stevesk Exp $
 .Dd September 25, 1999
 .Dt SSHD 8
 .Os
@@ -1036,6 +1036,10 @@ or the
 .Pa id_rsa.pub
 file and edit it.
 .Pp
+.Nm
+enforces a minimum RSA key modulus size for protocol 1
+and protocol 2 keys of 768 bits.
+.Pp
 The options (if present) consist of comma-separated option
 specifications.
 No spaces are permitted, except within double quotes.