Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Using OpenSSL from the command line in Linux, is there some way to examine a key (either public or private) to determine the key size?

share|improve this question
1  
There are many different ways depending on the format of the keypair. Were you looking at a specific format? –  Zoredache Oct 27 '11 at 19:55

2 Answers 2

up vote 30 down vote accepted
openssl rsa -in private.key -text -noout

The top line of the output will display the key size.

For example:

Private-Key: (2048 bit)

To view the key size from a certificate:

$ openssl x509 -in public.pem -text -noout | grep "RSA Public Key"
RSA Public Key: (2048 bit)
share|improve this answer
    
And if he is using DSA, or something else. How about determining the key size from the public key(cert). –  Zoredache Oct 27 '11 at 19:51
    
@Zoredache Yeah - I could have sworn the question said "private key" specifically; either I'm losing it or an edit beat the 5 minute timer. –  Shane Madden Oct 27 '11 at 20:13

The first (2048) is the bit length of the key:

 $ ssh-keygen -lf /etc/ssh/rsa_key.pub 
 2048 91:1c:ae:17:16:...
share|improve this answer
2  
He said 'openssl', not 'openssh'. –  MikeyB Oct 27 '11 at 20:46

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.