Ciphers

[Dave Tonge]

There is a relevant discussion here: https://github.com/ConsumerDataStandardsAustralia/infosec/issues/1

I suggest that we make the guidance clearer in FAPI around length of keys, eg. from BCP195:

With a key exchange based on modular exponential (MODP) Diffie- Hellman groups ("DHE" cipher suites), DH key lengths of at least 2048 bits are RECOMMENDED.

This has been misunderstood by a few people

[Nat Sakimura]

Merged in dgtonge/fapi/clarity-on-key-length (pull request #104)

Added explicit requirement of the key length for RSA keys. Fixed #209

Approved-by: Nat Sakimura [e-mail]

→ <<cset 64831778bf6a>>