| Index: openssl/crypto/dh/generate
|
| diff --git a/openssl/crypto/dh/generate b/openssl/crypto/dh/generate
|
| deleted file mode 100644
|
| index 5d407231df5b030a33c9b904c18cc5fba8e5e485..0000000000000000000000000000000000000000
|
| --- a/openssl/crypto/dh/generate
|
| +++ /dev/null
|
| @@ -1,65 +0,0 @@
|
| -From: stewarts@ix.netcom.com (Bill Stewart)
|
| -Newsgroups: sci.crypt
|
| -Subject: Re: Diffie-Hellman key exchange
|
| -Date: Wed, 11 Oct 1995 23:08:28 GMT
|
| -Organization: Freelance Information Architect
|
| -Lines: 32
|
| -Message-ID: <45hir2$7l8@ixnews7.ix.netcom.com>
|
| -References: <458rhn$76m$1@mhadf.production.compuserve.com>
|
| -NNTP-Posting-Host: ix-pl4-16.ix.netcom.com
|
| -X-NETCOM-Date: Wed Oct 11 4:09:22 PM PDT 1995
|
| -X-Newsreader: Forte Free Agent 1.0.82
|
| -
|
| -Kent Briggs <72124.3234@CompuServe.COM> wrote:
|
| -
|
| ->I have a copy of the 1976 IEEE article describing the
|
| ->Diffie-Hellman public key exchange algorithm: y=a^x mod q. I'm
|
| ->looking for sources that give examples of secure a,q pairs and
|
| ->possible some source code that I could examine.
|
| -
|
| -q should be prime, and ideally should be a "strong prime",
|
| -which means it's of the form 2n+1 where n is also prime.
|
| -q also needs to be long enough to prevent the attacks LaMacchia and
|
| -Odlyzko described (some variant on a factoring attack which generates
|
| -a large pile of simultaneous equations and then solves them);
|
| -long enough is about the same size as factoring, so 512 bits may not
|
| -be secure enough for most applications. (The 192 bits used by
|
| -"secure NFS" was certainly not long enough.)
|
| -
|
| -a should be a generator for q, which means it needs to be
|
| -relatively prime to q-1. Usually a small prime like 2, 3 or 5 will
|
| -work.
|
| -
|
| -....
|
| -
|
| -Date: Tue, 26 Sep 1995 13:52:36 MST
|
| -From: "Richard Schroeppel" <rcs@cs.arizona.edu>
|
| -To: karn
|
| -Cc: ho@cs.arizona.edu
|
| -Subject: random large primes
|
| -
|
| -Since your prime is really random, proving it is hard.
|
| -My personal limit on rigorously proved primes is ~350 digits.
|
| -If you really want a proof, we should talk to Francois Morain,
|
| -or the Australian group.
|
| -
|
| -If you want 2 to be a generator (mod P), then you need it
|
| -to be a non-square. If (P-1)/2 is also prime, then
|
| -non-square == primitive-root for bases << P.
|
| -
|
| -In the case at hand, this means 2 is a generator iff P = 11 (mod 24).
|
| -If you want this, you should restrict your sieve accordingly.
|
| -
|
| -3 is a generator iff P = 5 (mod 12).
|
| -
|
| -5 is a generator iff P = 3 or 7 (mod 10).
|
| -
|
| -2 is perfectly usable as a base even if it's a non-generator, since
|
| -it still covers half the space of possible residues. And an
|
| -eavesdropper can always determine the low-bit of your exponent for
|
| -a generator anyway.
|
| -
|
| -Rich rcs@cs.arizona.edu
|
| -
|
| -
|
| -
|
|
|