On Mon, Dec 9, 2013 at 10:34 PM, Niels Möller <[email protected]> wrote:
>> I think having a limitation that q_size < p_size/2 is pretty much >> reasonable. The recommendations for DH parameters have q_size << >> p_size/2. > Good to know. I was thinking that, e.g., p_size = q_size + 1 (and p = 2q > + 1) was important. But maybe that's a special case, and the general > case of q_size close to p_size is not very important? Other implementations use it (or more precise they use safe primes rather than set q explicitly). If that use-case is required, having a different function to generate safe primes seems good enough. regards, Nikos _______________________________________________ nettle-bugs mailing list [email protected] http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
