On Mon, 10 Nov 2014 18:12:48 -0500
Brian Hinz <[email protected]> wrote:

> 
> I think that the actual limitation in question is that Java is requiring
> the prime length to be a multiple of 64.  Presumably this dates back to
> FIPS-186-1 which did require prime lengths to be multiples of 64.  The
> limitation on the prime length is supposedly being relaxed in Java 8.
> 

I checked the JDK 8 code, and the limitation is still there. As is it
in JDK 9. So there doesn't seem to be a fix on the way. :/

E.g.:

http://hg.openjdk.java.net/jdk9/dev/jdk/file/ad04eada78e9/src/java.base/share/classes/com/sun/crypto/provider/DHKeyPairGenerator.java

Rgds
-- 
Pierre Ossman           Software Development
Cendio AB               http://cendio.com
Teknikringen 8          http://twitter.com/ThinLinc
583 30 Linköping        http://facebook.com/ThinLinc
Phone: +46-13-214600    http://plus.google.com/112509906846170010689

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Gnutls-help mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-help

Reply via email to