Default ASYM_ENCRYPT asym_keylength is considered breakable ----------------------------------------------------------- Key: JGRP-2302 URL: https://issues.jboss.org/browse/JGRP-2302 Project: JGroups Issue Type: Bug Affects Versions: 4.0.15 Reporter: Radoslav Husar Assignee: Radoslav Husar Priority: Major Fix For: 4.0.16 JGroups default asym_keylength is 512, however RSA keys less than 1024 bits are considered breakable (e.g. https://www.oracle.com/technetwork/java/javase/8-compatibility-guide-2156... ) We should baseline the default to a secure size universally supported in our supported JDKs. Also, since JDK8 the default is 2048.