The service can create and use RSA keys with a 4096-bit modulus for encryption and digital signatures.
RSA-4096
CCC.KeyMgmt.CP04
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH05 | Keys are Created With Algorithms Not Permitted by Policy | Key creation accepts any supported algorithm and key length, so a key may be created with a curve or modulus that organizational policy or a regulatory baseline does not permit, such as a non-NIST curve or a modulus below the required size. Data or signatures protected by that key then rely on weaker cryptography than intended. Confidentiality and integrity of the protected data are reduced for the life of the ciphertext or signature. |
| CCC.KeyMgmt.TH08 | A Single Key is Used for Multiple Cryptographic Purposes | A key may be created without a usage restriction, or with a restriction that permits both encryption and signing operations. The same key material is then exposed through two different cryptographic protocols, enabling cross-protocol attacks in which an oracle from one operation reveals information about the other. Confidentiality of data encrypted with the key and integrity of signatures produced with it are both weakened. |