Question: What are the minimum recommended key lengths for RSA and ECDSA in an OCSP server, according to security best practices for certificate signing?
Option 1: RSA: 1024-bit, ECDSA: 192-bit
Option 2: RSA: 2048-bit (with support for 4096-bit), ECDSA: at least 256-bit (with support for 384-bit)
Option 3: RSA: 3072-bit, ECDSA: 521-bit
Option 4: RSA: 4096-bit, ECDSA: 768-bit
Explanation: This option correctly reflects the security requirements outlined for OCSP servers. For RSA, a minimum of 2048-bit is required with the capability to support at least 4096-bit keys. For ECDSA, while the exact minimum is not directly stated in the query context, the implication is that key lengths less than 256 bits are not supported (except for specific excluded curves), and there should be support for at least 384-bit keys, aligning with best practices for security levels comparable to those of the certificates being validated.