6.1.5 Key Sizes - Root CA

[lachellel]

Needs to be updated to align with NIST SP 800-131A and FIPS 186-4 AND larger key size for the root (minimum 4096)

Currently in Section 6.1.5

(1) Root CA Certificates

	Validity period beginning on or before 31 Dec 2010	Validity period beginning after 31 Dec 2010
Digest algorithm	MD5 (NOT RECOMMENDED), SHA-1, SHA-256, SHA-384 or SHA-512	SHA-1*, SHA-256, SHA-384 or SHA-512
Minimum RSA modulus size (bits)	2048**	2048
ECC curve	NIST P-256, P-384, or P-521	NIST P-256, P-384, or P-521
Minimum DSA modulus and divisor size (bits)***	L= 2048 N= 224 or L= 2048 N= 256	L= 2048 N= 224 or L= 2048 N= 256

[LarryFrank]

My comment on 4096 under subordinate CAs applies here (probably more appropriately than where I made it...)

Recommend dropping the before 2010 col and drop "SHA-1* from the after col. as both are OBE and neither conforms to the CA/B requirements.

[lachellel]

• Min Modulus size = 4096

• Remove all SHA-1 references

• ECC - P-256, P-384 and P-521 - do we restrict and remove P-256