[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-07-14 (世界標準時間)。"],[[["When setting up a Certificate Authority (CA), you must select a signing algorithm for the Cloud Key Management Service key, choosing between RSA and ECDSA families."],["RSA algorithms are ideal for compatibility with legacy systems due to their widespread support, with `RSA_SIGN_PSS` being preferred for newer systems and `RSA_SIGN_PKCS1` for older ones."],["ECDSA algorithms offer strong security with smaller key sizes, making them efficient for storage and data transmission, and they are available in `EC_SIGN_P256` and `EC_SIGN_P384` variants."],["For new root CAs or long-lived subordinate CAs, it's recommended to use the largest key size available within the chosen algorithm family, such as 4096 bits for RSA or 384 bits for ECDSA."],["The guide recommends choosing an algorithm family first (based on root CA's or legacy system support), then selecting a specific signature algorithm (PSS or PKCS1 for RSA), and finally determining the key size based on CA lifetime and security needs."]]],[]]
