I note that openssl supports DSA with more than 1024 bits. I've also seen several other vendors who claim 2048 bit DSA support. This leads me to wonder: 1) Since the DSS specifies 512-1024 bits, how are these extentions calculated? And are the various vendor implementations interoperable? I took a look at the output of dsaparam, and noted that parameters P,G are calculated at the full length and Q is still 160 bits. I read somewhere (I can't find the reference right now) that the size of Q needs to be increased as P exceeds 1024 bits. This implies that a new hash instead of SHA1 needs to be used - I've seen some web sites talk about a SHA-2 hash. Next Questions: 2) It is true that you need a bigger hash function for DSA > 1024 bit? Does openssl implement this? Does anyone implement it? Thanks ________________________________________________ Andy Adler | AiT | (613)722-2070 | [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
