|
Digi-Sign's Plan for the Issuance of 2048-bit
ID-Cert
As a certification authority recognized under
the Electronic Transactions Ordinance of the Hong Kong Special
Administrative Region, Digi-Sign
Certification Services Limited ("Digi-Sign") is
dedicated to implementing the best practices of Public Key Infrastructure
commonly adopted worldwide.
According to recommendation made by National
Institute of Standards and Technology's (NIST) in Special
Publication 800-131, the industry should not use RSA keys with
key length less than 2048 bits to generate digital signatures
after 31 December 2013. To support higher level security in performing
electronic transactions, Digi-Sign will implement the following
plan on the issuance of 2048-bit ID-Certs:
| |
1024-bit
ID-Cert |
2048-bit
ID-Cert |
| From 1 January 2012 to
31 December 2013 |
Default |
On Request |
| From 1 January 2014 onwards |
Ceased |
Default |
|
For the avoidance of doubt, subscribers can continue
to use their existing 1024-bit ID-Certs until their natural expiry.
Subscribers who wish to use 2048-bit ID-Certs
are advised to contact their respective relying parties to confirm
the readiness of their systems or applications on the support
of 2048-bit certificates.
For parties relying on ID-Certs, they can make
arrangement, if any and as appropriate, on their systems or applications
to support 2048-bit certificates. Should they need any advice
or technical support, they can contact Digi-Sign Hotline at 2917
8833.
|