I created my PGP key in 2000. I’ve revoked the older, weaker sub-keys in favor of a 4096-bit RSA one, but the primary key is 1024-bit DSA. I read on Wikipedia that…
NIST 800-57 recommends lengths of 2048 for keys with security lifetimes extending beyond 2010.
- Should I consider my primary key insecure?
- If so, is there any way to replace it without revoking my entire key and creating a new one?
- If my primary key were compromised, the attacker would be able to create signatures as me, but they wouldn’t be able to decrypt information that was encrypted to my public key, right?