I've seen enough requests now that I think it might be worthwhile
extending OpenSSLs support for DH to include the new X9.42 variant and
ultimately such things as DH certificates.
One problem with X9.42 DH. I haven't seen any examples of the domain
parameter generation (the one based on DSA) that have m > 160 (Other
then the S/MIME examples stuff which so far I can't reproduce and which
no one says they've independently verified). They all have m = 160.
Certain parts of the algorithm aren't used unless m > 160.
So has anyone got any examples or can generate some I can independently
verify? Its just the domain parameter stuff I'm after, I've lots of test
data for the other parts of the algorithm.
Any help appreciated, Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
