Is it scary to use 1024 RSA key?

Question

JSON Web Token

I haven’t figured out if this is the problem yet, but it seems that generating a signature for JWT via RSA 4096 takes a lot more processor than when there was a signature via MD5 - is that so? Maybe try 1024 keys to reduce the CPU load during JWT signature generation (short lived 5 to 15 minutes in this case)?

Answer 1

Yes, hosspade, use 1024, you are not encrypting launch codes for nuclear warheads.
In addition, 5-15 minutes is nothing, a moment.

Answer 2

RSA is an encryption algorithm and MD5 is a hash algorithm. They are not interchangeable. You can't sign with MD5 alone.