artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2cad8c6) | patch
Increase number of iterations in Miller-Rabin checks for DH.
authortb <tb@openbsd.org>
Mon, 29 Nov 2021 19:54:07 +0000 (19:54 +0000)
committertb <tb@openbsd.org>
Mon, 29 Nov 2021 19:54:07 +0000 (19:54 +0000)
commit0cbf20e40b61bcc0b5a62b7d2d8e4aa49ebca499
treea4688a29ad9025757f7c8d74bc97b7223738fd11tree | snapshot
parent2cad8c6edbe08217df544501aff65e464af3675bcommit | diff
Increase number of iterations in Miller-Rabin checks for DH.

BN_prime_checks is only to be used for random input. Here, the
input isn't random, so increase the number of checks. According
to https://eprint.iacr.org/2019/032, 64 rounds is suitable.

From Jake Massimo, OpenSSL 1.1.1, af6ce3b4

ok inoguchi jsing
lib/libcrypto/dh/dh_check.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim