[openssl-dev] [openssl.org #3854] openssl.cnf in openssl-1.0.1m still uses default_bits=1024

2016-02-12 Thread Emilia Käsper via RT
We cleaned this up a little: - crypto/conf/ssleay.cnf was obsolete and is gone from the master branch. - the req app now uses 2048 bits as a default if no other defaults are given. ssleay.txt is already gone from the master branch, and the test/ ones are used in tests. Cheers, Emilia --

[openssl-dev] [openssl.org #3854] openssl.cnf in openssl-1.0.1m still uses default_bits=1024

2016-02-01 Thread Emilia Käsper via RT
1.0.1m predates Logjam. We changed DH key generation to use 2048 bits by default in OpenSSL 1.0.1n which is the first 1.0.1 release after. The default_bits in apps/openssl.cnf is a sample certificate request configuration and isn't really related to Logjam. But we changed it as well as other key

[openssl-dev] [openssl.org #3854] openssl.cnf in openssl-1.0.1m still uses default_bits=1024

2015-05-21 Thread kolafl...@kolahilft.de via RT
Hi! I just read about the Logjam attack to Diffie-Hellman. https://weakdh.org/imperfect-forward-secrecy.pdf | We provide new estimates for the computational resources necessary | to compute discrete logarithms in groups of these sizes, concluding | that 768-bit groups are within range of