diff options
| author | Theo Buehler <tb@cvs.openbsd.org> | 2021-11-29 20:13:26 +0000 |
|---|---|---|
| committer | Theo Buehler <tb@cvs.openbsd.org> | 2021-11-29 20:13:26 +0000 |
| commit | 7d0e35fe7c61e6c7c86f548af5c0ec4f71052f88 (patch) | |
| tree | 670cb0f6761b5d1021df89184d7909ecb9ea0160 /lib/libcrypto/dsa/dsa.h | |
| parent | fefadc55eaca80de85f3bdadfdda7ebfddab7343 (diff) | |
Crank the number of rounds of Miller-Rabin from 50 to 64
for DSA key generation.
From Kurt Roeckx, OpenSSL 74ee3796
ok bcook inoguchi jsing
Diffstat (limited to 'lib/libcrypto/dsa/dsa.h')
| -rw-r--r-- | lib/libcrypto/dsa/dsa.h | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/lib/libcrypto/dsa/dsa.h b/lib/libcrypto/dsa/dsa.h index 61bfc2b4668..15536f63e26 100644 --- a/lib/libcrypto/dsa/dsa.h +++ b/lib/libcrypto/dsa/dsa.h @@ -1,4 +1,4 @@ -/* $OpenBSD: dsa.h,v 1.30 2018/03/17 15:19:12 tb Exp $ */ +/* $OpenBSD: dsa.h,v 1.31 2021/11/29 20:13:25 tb Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -247,9 +247,12 @@ int DSA_print(BIO *bp, const DSA *x, int off); int DSAparams_print_fp(FILE *fp, const DSA *x); int DSA_print_fp(FILE *bp, const DSA *x, int off); -#define DSS_prime_checks 50 -/* Primality test according to FIPS PUB 186[-1], Appendix 2.1: - * 50 rounds of Rabin-Miller */ +/* + * Primality test according to FIPS PUB 186-4, Appendix C.3. Set the number + * to 64 rounds of Miller-Rabin, which corresponds to 128 bits of security. + * This is necessary for keys of size >= 3072. + */ +#define DSS_prime_checks 64 #define DSA_is_prime(n, callback, cb_arg) \ BN_is_prime(n, DSS_prime_checks, callback, NULL, cb_arg) |