Skip to content
This repository was archived by the owner on Oct 24, 2022. It is now read-only.
This repository was archived by the owner on Oct 24, 2022. It is now read-only.

Minimum key length of 2048 bits? #1

@rolodato

Description

@rolodato

According to section 8.2 of the JWT spec, key lengths of 2048 or greater must be used when signing a token with RSA256.

However, it seems that we're generating keys of only 1024 bits as shown here: https://github.com/auth0/TouchIDAuth/blob/a6f9659c63deeb21faad05acacc48323c00ac77e/Pod/Classes/A0TouchIDAuthentication.m#L105.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions