← Back to report

Investigate Short signing key (RSA 1024-bit)

Build CA.226.0 · Scan 2026-09-30T09:27:51.308Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

The signing key is shorter than the modern 2048-bit RSA minimum. Short keys are cryptographically weaker; a release should re-key to at least RSA-2048 (or an EC key).

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Signing metadata

Representative location

META-INF/signing:key

Recorded match

RSA-1024

Detector rule

signing

Recorded file locations

• META-INF/signing:key