Professional generally accepted character length for L2L VPN key?

[jmaxwellUSAF]

Hiya.

I expect there is no exact answer for this, but please tell me your suggestion...

Is there a professional generally accepted (unencrypted) character length for a financial institution-to-vendor site-to-site VPN key?

Thank you.

[Rob Ingram · Accepted solution]

@jmaxwellUSAF 20+ randomly generated chracters - uppercase, lowercase, numbers, symbols.

Use Next Generation Encryption (NGE) algorithms - https://sec.cloudapps.cisco.com/security/center/resources/next_generation_cryptography

That's what I would suggest if using PSK - NIST guide recommends 128bits of entropy.

Also don't shared the PSK amongst different peers.