From 613fd214dbc3d7891ad16eefb8c7a3a646262fe5 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 15 Jun 2020 03:10:37 -0400
Subject: [PATCH] use 4096-bit RSA AVB keys for future devices

Per upstream for coral / flame.
---
 static/build.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/static/build.html b/static/build.html
index 334cb9d1..885a0e2a 100644
--- a/static/build.html
+++ b/static/build.html
@@ -564,7 +564,7 @@ cd keys/crosshatch
 ../../development/tools/make_key shared '/CN=GrapheneOS/'
 ../../development/tools/make_key media '/CN=GrapheneOS/'
 ../../development/tools/make_key networkstack '/CN=GrapheneOS/'
-openssl genrsa 2048 | openssl pkcs8 -topk8 -scrypt -out avb.pem
+openssl genrsa 4096 | openssl pkcs8 -topk8 -scrypt -out avb.pem
 ../../external/avb/avbtool extract_public_key --key avb.pem --output avb_pkmd.bin
 cd ../..</pre>