AWS Security ChangesHomeSearch

AWS transfer medium security documentation change

Service: transfer · 2025-12-07 · Security-related medium

File: transfer/latest/userguide/manage-pgp-keys.md

Summary

Updated PGP key generation instructions to include Curve25519 support

Security assessment

Explicitly added Curve25519 as supported elliptic curve for ECC keys, expanding secure cryptographic options for users.

Diff

diff --git a/transfer/latest/userguide/manage-pgp-keys.md b/transfer/latest/userguide/manage-pgp-keys.md
index 8f95e73c2..1ec6ba492 100644
--- a//transfer/latest/userguide/manage-pgp-keys.md
+++ b//transfer/latest/userguide/manage-pgp-keys.md
@@ -23 +23 @@ You can store a maximum of 3 PGP private keys, per Transfer Family server, per u
-  1. Depending on the version of GPG that you are using, run one of the following commands to generate a PGP key pair that doesn't use a Curve 25519 encryption algorithm.
+  1. Depending on the version of GPG that you are using, run one of the following commands to generate a PGP key pair.
@@ -29 +29 @@ You can store a maximum of 3 PGP private keys, per Transfer Family server, per u
-You can choose `RSA`, or, if you choose `ECC`, you can choose either `NIST` or `BrainPool` for the elliptic curve. If you run `gpg --gen-key` instead, you create a key pair that uses the ECC Curve 25519 encryption algorithm, which we don't currently support for PGP keys. 
+You can choose `RSA`, or, if you choose `ECC`, you can choose either `NIST`, `BrainPool` or `Curve25519` for the elliptic curve. If you run `gpg --gen-key` instead, you create a key pair that uses the ECC Curve 25519 encryption algorithm.