Skip to content

Commit 2cbe4c4

Browse files
authored
fix(dev): update device ID documentation to Ed25519 (fixes #1028) (#1029)
Syncthing uses ed25519 since v2.0.0, but this was not updated in the docs. Solves #1028 I only updated the one important paragraph, but maybe it's better to explain what algos can actually be used and update the example output of `openssl x509` with an actual certificate generated in the latest version?
1 parent 56d35a6 commit 2cbe4c4

1 file changed

Lines changed: 6 additions & 6 deletions

File tree

‎dev/device-ids.rst‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ Keys
1414
To understand device IDs we need to look at the underlying mechanisms. At first
1515
startup, Syncthing will create a public/private keypair.
1616

17-
Currently this is a 384 bit ECDSA key (3072 bit RSA prior to v0.12.5,
18-
which is what is used as an example in this article). The keys are saved in
19-
the form of the private key (``key.pem``) and a self signed certificate
20-
(``cert.pem``). The self signing part doesn't actually add any security or
21-
functionality as far as Syncthing is concerned but it enables the use of the
22-
keys in a standard TLS exchange.
17+
Currently this is a 256 bit Ed25519 key (384 bit ECDSA prior to v2.0.0 and
18+
3072 bit RSA prior to v0.12.5, which is what is used as an example in this
19+
article). The keys are saved in the form of the private key (``key.pem``) and a
20+
self signed certificate (``cert.pem``). The self signing part doesn't actually
21+
add any security or functionality as far as Syncthing is concerned but it enables
22+
the use of the keys in a standard TLS exchange.
2323

2424
The typical certificate will look something like this, inspected with
2525
``openssl x509``::

0 commit comments

Comments
 (0)