SSL/TLS & Transport
medium Severity
Free Check
Cryptographic Key Strength (RSA 2048+ / ECC)
Checks public key modulus size (RSA ≥ 2048-bit, ECC ≥ 256-bit) to withstand brute-force cryptanalysis.
Why It Matters
RSA keys shorter than 2048 bits are vulnerable to factorization by state-level attackers and cloud computing clusters.
How We Check This
We extract the public key algorithm and bit length from the peer certificate.
How to Fix & Implement
Copy-paste configuration blocks tailored for your web server or edge proxy.
nginx snippet
openssl req -new -newkey rsa:2048 -nodes -keyout privkey.pem
Frequently Asked Questions
Is ECDSA better than RSA?
ECDSA provides equivalent security to RSA 3072-bit with a much smaller key size (256 bits), yielding faster handshakes.