On Tuesday 19 August 2008 18:36:27 Toshio Kuratomi wrote:
3) The Account System code will prevent you from uploading a DSA
key.
So if your key was DSA, you'll have to generate an RSA key and upload
that. This is due to the fact that we haven't found a 100% accurate way
to find all DSA keys generated by the eak-Debian-random-number-packages.
The broken random generator was also used to generate RSA keys. According to
http://wiki.debian.org/SSLkeys#head-d841ac769390d013577ce3fd2be24b8cf5a74cfb
good DSA keys can be compromised when used with the broken random generator.
Regards,
Till