diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2011-12-12 17:46:00 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2011-12-12 17:55:44 +0100 |
| commit | 55968012dcefc50590925b4ddcf556f8ca67a8b5 (patch) | |
| tree | f00cabefcf030c9703f8fa0c4f20b04836b0c3a2 /lib/nettle/mpi.c | |
| parent | 4b0c8268003bc16a374f7ab567bea29d93e2d081 (diff) | |
| download | gnutls-55968012dcefc50590925b4ddcf556f8ca67a8b5.tar.gz | |
Diffie Hellman PKCS #3 parameters now contain the recommended private key size.
By using the recommended key size the calculations for the server side are
reduced, giving a 50% increase in DH calculations.
Diffstat (limited to 'lib/nettle/mpi.c')
| -rw-r--r-- | lib/nettle/mpi.c | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/lib/nettle/mpi.c b/lib/nettle/mpi.c index 322811daf7..0ebdcf4d2d 100644 --- a/lib/nettle/mpi.c +++ b/lib/nettle/mpi.c @@ -413,7 +413,7 @@ wrap_nettle_prime_check (bigint_t pp) * */ inline static int -gen_group (mpz_t * prime, mpz_t * generator, unsigned int nbits) +gen_group (mpz_t * prime, mpz_t * generator, unsigned int nbits, unsigned int *q_bits) { mpz_t q, w, r; unsigned int p_bytes = nbits / 8; @@ -520,8 +520,9 @@ gen_group (mpz_t * prime, mpz_t * generator, unsigned int nbits) } } + *q_bits = wrap_nettle_mpi_get_nbits (&q); _gnutls_debug_log ("Found prime q of %u bits. Looking for generator...\n", - wrap_nettle_mpi_get_nbits (&q)); + *q_bits); /* finally a prime! Let calculate generator */ @@ -585,6 +586,7 @@ wrap_nettle_generate_group (gnutls_group_st * group, unsigned int bits) int ret; bigint_t p = wrap_nettle_mpi_new (bits); bigint_t g; + unsigned int q_bits; if (p == NULL) { @@ -600,7 +602,7 @@ wrap_nettle_generate_group (gnutls_group_st * group, unsigned int bits) return GNUTLS_E_MEMORY_ERROR; } - ret = gen_group (p, g, bits); + ret = gen_group (p, g, bits, &q_bits); if (ret < 0) { _gnutls_mpi_release (&g); @@ -611,6 +613,7 @@ wrap_nettle_generate_group (gnutls_group_st * group, unsigned int bits) group->p = p; group->g = g; + group->q_bits = q_bits; return 0; } |