rsa: Do not allow less than 512 bit RSA keys

[openssl.git] / doc / man1 / genrsa.pod

diff --git a/doc/man1/genrsa.pod b/doc/man1/genrsa.pod
index 3e42c98f5d3c4376ea46d325c677fe08ab3f911e..25562dc8664ba8f779dfd6c91f7fa5fe236f7cfd 100644 (file)
--- a/doc/man1/genrsa.pod
+++ b/doc/man1/genrsa.pod
@@ -94,7 +94,7 @@ RSA key, which is defined in RFC 8017.
 =item B<numbits>
 
 The size of the private key to generate in bits. This must be the last option
-specified. The default is 2048.
+specified. The default is 2048 and values less than 512 are not allowed.
 
 =back
 
@@ -112,13 +112,6 @@ Because key generation is a random process the time taken to generate a key
 may vary somewhat. But in general, more primes lead to less generation time
 of a key.
 
-=head1 BUGS
-
-A quirk of the prime generation algorithm is that it cannot generate small
-primes. Therefore the number of bits should not be less that 64. For typical
-private keys this will not matter because for security reasons they will
-be much larger (typically 1024 bits).
-
 =head1 SEE ALSO
 
 L<gendsa(1)>