The CA/B Is Mandating That the Minimum Key Size for Code Signing Certificates Increase to 3072 Bits on June 1, 2021

Changes are coming soon to the world of Code Signing Certificates. Starting on June 1, 2021, the minimum key size for code signing certificates will increase from 2048 bits to 3072 bits. The change, mandated by the CA/B forum, is meant to boost certificate security and better prepare for future technological advancements that will result in increased computational power. 

Code signing certificates are employed by software developers to digitally sign their products – whether it be applications, drivers, executables, or other programs. The signature acts as a means for end users to verify that the product they’re downloading and installing is actually coming from the software’s creator and that the code hasn’t been altered or tampered with by a third party while in transit.

Signatures can be valid for long periods of time (we’re talking several years), and in the meantime, advances in technology can leave these older, weaker crypto keys vulnerable to brute force attacks. Therefore, one way of future-proofing these signatures is to increase the minimum key length used by code signing certificates.

So, what does key length mean exactly? What does the change entail, exactly? And most importantly, what effect will this have on your current and future certificates?

Let’s hash it out.

The post Changes Coming Soon to Code Signing Certificate Security Requirements appeared first on Hashed Out by The SSL Store™.