CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2021/11/29 12:54:07
Modified files:
lib/libcrypto/dh: dh_check.c
Log message:
Increase number of iterations in Miller-Rabin checks for DH.
BN_prime_checks is only to be used for random input. Here, the
input isn't random, so increase the number of checks. According
to https://eprint.iacr.org/2019/032, 64 rounds is suitable.
>From Jake Massimo, OpenSSL 1.1.1, af6ce3b4
ok inoguchi jsing
