On Thu, Jun 08, 2006 at 07:05:36PM +0200, Marek Marcola wrote:

> > Also any non-anecdotal evidence that a 2048 bit key was actually
> > requested? Not sure how the private key will help, the *modulus* is
> > 1095 bits, and it is the same for the private and public keys.
>
> Private key has also p and q prime numbers.
> With this information we may check if they are really prime
> (maybe due to some software bug they are not), we can calculate
> modulus "by hand" to check for example that prime numbers are ok
> calculated modulus is ok but there is a bug in procedure 
> which (for example) reads private key from file or from buffer.

The modulus should be the product of the two numbers, prime or not,
so if the two numbers are large enough, so is the modulus. Either:

        - The two "primes" are too small. (Not really a primality
          problem per-se).

    OR

        - The product is calculated incorrectly.

    OR

        - The user did not ask for a 2048 bit key.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to