Section 4(1) in The Information Technology (Certifying Authority) Regulations, 2001
(1)The minimum key length for Asymmetric cryptosystem (RSA Algorithm) shall be 2048 for the Certifying Authority's key pairs and 1024 for the key pairs used by subscribers.
