AWS transfer medium security documentation change
Summary
Updated PGP key generation instructions to include Curve25519 support
Security assessment
Explicitly added Curve25519 as supported elliptic curve for ECC keys, expanding secure cryptographic options for users.
Diff
diff --git a/transfer/latest/userguide/manage-pgp-keys.md b/transfer/latest/userguide/manage-pgp-keys.md index 8f95e73c2..1ec6ba492 100644 --- a//transfer/latest/userguide/manage-pgp-keys.md +++ b//transfer/latest/userguide/manage-pgp-keys.md @@ -23 +23 @@ You can store a maximum of 3 PGP private keys, per Transfer Family server, per u - 1. Depending on the version of GPG that you are using, run one of the following commands to generate a PGP key pair that doesn't use a Curve 25519 encryption algorithm. + 1. Depending on the version of GPG that you are using, run one of the following commands to generate a PGP key pair. @@ -29 +29 @@ You can store a maximum of 3 PGP private keys, per Transfer Family server, per u -You can choose `RSA`, or, if you choose `ECC`, you can choose either `NIST` or `BrainPool` for the elliptic curve. If you run `gpg --gen-key` instead, you create a key pair that uses the ECC Curve 25519 encryption algorithm, which we don't currently support for PGP keys. +You can choose `RSA`, or, if you choose `ECC`, you can choose either `NIST`, `BrainPool` or `Curve25519` for the elliptic curve. If you run `gpg --gen-key` instead, you create a key pair that uses the ECC Curve 25519 encryption algorithm.