25May
SSH Key: Ed25519 vs RSA
A lot of people recommend using Ed25519
instead of RSA
keys for SSH.
The introduction page of Ed25519
(http://ed25519.cr.yp.to/) says:
[..] breaking it has similar difficulty to breaking [..] RSA with ~3000-bit keys [..]
So speaking only of security (not speed!), why should one not prefer RSA 4096
over Ed25519
?
If Ed25519
only provides ~3000 bit key strength, RSA
with 4096 bit should be much more secure?