What are the recommended arguments to
ssh-keygen for generating a secure ssh keypair these days? The default appears to be 2048 bit RSA, good enough?
OpenSSH_6.1p1, OpenSSL 1.0.1c 10 May 2012.
The default 2048 bit RSA is considered safe until 2030. If that is good enough for you you can generate your keys with the following command:
If you require a key that is safe beyond 2030 a longer key is recommended (3072 bit should suffice). You can define the key size with the -b argument:
The result of the commands are two files: the private key as defined by the -f argument, and the public key with the extension .pub.