AWS transfer medium security documentation change
Summary
Updated PGP key generation guidance to allow Curve25519 elliptic curve for ECC keys
Security assessment
Added support for Curve25519 (modern high-security elliptic curve) in PGP key generation enhances cryptographic security options. Previously prohibited, now explicitly allowed.
Diff
diff --git a/transfer/latest/userguide/generate-pgp-keys.md b/transfer/latest/userguide/generate-pgp-keys.md index 4a74851f1..da82826e5 100644 --- a//transfer/latest/userguide/generate-pgp-keys.md +++ b//transfer/latest/userguide/generate-pgp-keys.md @@ -27 +27 @@ After you install your PGP key generator software, you run the `gpg --full-gen-k -If you're using `GnuPG` version 2.3.0 or newer, you must run `gpg --full-gen-key`. When prompted for the type of key to create, choose RSA or ECC. However, if you choose ECC, make sure to choose either NIST or BrainPool for the elliptic curve. **Do not** choose Curve 25519. +If you're using `GnuPG` version 2.3.0 or newer, you must run `gpg --full-gen-key`. When prompted for the type of key to create, choose RSA or ECC. If you choose **ECC** , you can choose from NIST, BrainPool and Curve25519 for the elliptic curve.