=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/ssh-keygen.1,v retrieving revision 1.67.2.1 retrieving revision 1.67.2.2 diff -u -r1.67.2.1 -r1.67.2.2 --- src/usr.bin/ssh/ssh-keygen.1 2005/09/04 18:40:09 1.67.2.1 +++ src/usr.bin/ssh/ssh-keygen.1 2006/02/03 02:53:45 1.67.2.2 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ssh-keygen.1,v 1.67.2.1 2005/09/04 18:40:09 brad Exp $ +.\" $OpenBSD: ssh-keygen.1,v 1.67.2.2 2006/02/03 02:53:45 brad Exp $ .\" .\" -*- nroff -*- .\" @@ -118,6 +118,9 @@ The type of key to be generated is specified with the .Fl t option. +If invoked without any arguments, +.Nm +will generate an RSA key for use in SSH protocol 2 connections. .Pp .Nm is also used to generate groups for use in Diffie-Hellman group @@ -187,9 +190,9 @@ Show the bubblebabble digest of specified private or public key file. .It Fl b Ar bits Specifies the number of bits in the key to create. -Minimum is 512 bits. +For RSA keys, the minimum size is 768 bits and the default is 2048 bits. Generally, 2048 bits is considered sufficient. -The default is 2048 bits. +DSA keys must be exactly 1024 bits as specified by FIPS 186-2. .It Fl C Ar comment Provides a new comment. .It Fl c