AWS transfer medium security documentation change
Summary
Modified PGP key generation instructions to permit Curve25519 usage
Security assessment
Enabled Curve25519 as an allowed elliptic curve in decryption workflows, aligning with enhanced security standards.
Diff
diff --git a/transfer/latest/userguide/workflow-decrypt-tutorial.md b/transfer/latest/userguide/workflow-decrypt-tutorial.md index 5a510245f..ea6a038ee 100644 --- a//transfer/latest/userguide/workflow-decrypt-tutorial.md +++ b//transfer/latest/userguide/workflow-decrypt-tutorial.md @@ -196 +196 @@ Use one of the [supported PGP clients](./pgp-key-clients.html) to generate a PGP -If you're using `GnuPG` version 2.3.0 or newer, you must run `gpg --full-gen-key`. When prompted for the type of key to create, choose RSA or ECC. However, if you choose ECC, make sure to choose either NIST or BrainPool for the elliptic curve. **Do not** choose Curve 25519. +If you're using `GnuPG` version 2.3.0 or newer, you must run `gpg --full-gen-key`. When prompted for the type of key to create, choose RSA or ECC. If you choose **ECC** , you can choose from NIST, BrainPool and Curve25519 for the elliptic curve.