What is the most secure way to generate key pairs?
RSA is based on integer factorization. It is the most common way to generate key pairs due to its security and portability. It has been broken theoretically by Shar’s algorithm (based in quantum computing techniques). But it is still secure to use it nowadays if its key length is at least 4096 bits.
How do I make my private keys secure?
A CA’s private key should be stored in hardware-based protection, such as a Hardware Security Module (HSM). This provides tamper-resistant secure storage. A Private key for an end entity could be stored in a Trusted Platform Module (TPM) chip or a USB tamper-resistant security token.
How to generate a public / private key pair?
To generate the public/private key pair, enter this in the Command Prompt: At the first prompt, “Enter file in which to save the key,” press Enter to save it in the default location. At the second prompt, “Enter passphrase (empty for no passphrase),” you have two options: Press Enter to create unencrypted key.
Is there such a thing as a most secure private key?
Above advice can be used to generate a more secure private key; there is no such thing as a most secure private key. If there would be such a thing, then I would doubt that you could use (software only) OpenSSL command line to generate it.
Where can I get my own private key?
For example, if you use a web wallet like Coinbase or Blockchain.info, they create and manage the private key for you. It’s the same for exchanges. Mobile and desktop wallets usually also generate a private key for you, although they might have the option to create a wallet from your own private key.
Are there any other ways to make the private key stronger?
Are there any other ways to make the private key stronger? Using AES and 4096 bit RSA would certainly help. At least openssl uses 3 key triple DES but that means both the triple DES and the RSA private key are stuck at a security strength of 112 bits.
https://www.youtube.com/watch?v=EZpT8wVzlPQ