OT: Microsoft Security Advisory: Update for minimum certificate key length

This is somewhat off topic, and I apologize for the noise. I imagine it could interop problems on occasion. http://support.microsoft.com/kb/2661254 ... The strength of public-key-based cryptographic algorithms is determined by the time that it takes to derive the private key by using brute-force

There is RSAPrivateKey_dup, why no counterpart for DSA/DH cert

Hi, My questions actually are two: 1. dup, which should stand for duplicate, in what case we should use such API. 2. RSA is only one kind of cert alg, so I expect counterpart for other alg certificate such as DH/DSA, but I can't find them in openssl 1.0.1c Thanks