I have created an OpenSSL RSA private key and certificate request with 4096 bit with the following command:
openssl req -newkey 4096
When I view the private key with
openssl asn1parse -in privkey
I get the following output:
0:d=0 hl=4 l=2446 cons: SEQUENCE 4:d=1 hl=2 l= 64 cons: SEQUENCE 6:d=2 hl=2 l= 9 prim: OBJECT :PBES2 17:d=2 hl=2 l= 51 cons: SEQUENCE 19:d=3 hl=2 l= 27 cons: SEQUENCE 21:d=4 hl=2 l= 9 prim: OBJECT :PBKDF2 32:d=4 hl=2 l= 14 cons: SEQUENCE 34:d=5 hl=2 l= 8 prim: OCTET STRING [HEX DUMP]:XXXXXXXXX 44:d=5 hl=2 l= 2 prim: INTEGER :0800 48:d=3 hl=2 l= 20 cons: SEQUENCE 50:d=4 hl=2 l= 8 prim: OBJECT :des-ede3-cbc
What bothers me is the part with des-ede3-cbc. Why is there des-ede3-cbc in my RSA private key? As far as I know "DES" is an encryption standard from the seventies and it's considered broken.