What are the recommended arguments to
ssh-keygen for generating a secure ssh keypair these days? The default appears to be 2048 bit RSA, good enough?
OpenSSH_6.1p1, OpenSSL 1.0.1c 10 May 2012.
2048 bit RSA is concidered safe until 2030. If that is good enough for you you can generate your keys with the following command:
If you require a key that is safe beyond 2030 a longer key is recommended (3072 bit should suffice). You can define the key size with the -b argument:
The output of the commands are two files, the private key as defined by the -f argument and the public key with the extension .pub.