--=-0a9q+ENa+GdqxYo2M145
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
i paste a discussion to openssl-users
how to implement this attack in perl
Le mercredi 23 mars 2011 =C3=A0 09:13 +0800, Ziyu Liu a =C3=A9crit :
> 1)The exponent x in DH can be any number.It should be big enough to
> bear attack.The source in DH told us what exponent x can be.
> ref:dh_key.c
> if (generate_new_key)
> {
> l =3D dh->length ? dh->length : BN_num_bits(dh->p)-1; /* secret
> exponent length */
> if (!BN_rand(priv_key, l, 0, 0)) goto err;
> }
> 2)The time of generation depends the length of your DH parameters.The
> longger parameters you created, the more time you need to compute the
> value.
> ref:
> int DH_generate_parameters_ex(DH *dh, int prime_len,int generator,
> BN_GENCB *cb);
>
>
> At 2011-03-23 08:12:37=EF=BC=8Cikuzar <razuki92 [at] gmail.com> wrote:
> Hello,
> I 'd like to know :
> 1) if exponent x in g^x must be a great prime number. In some
> docs I saw, it is said that x must b a GREAT number but no
> information about primality ..
> 2) May generation of 'x' run for hours like related here :
> http://www.openssl.org/docs/crypto/DH_generate_parameters.ht ml
> ( in NOTES)
> Thanks for your help.
>
>
>
--
gpg --keyserver pgp.mit.edu --recv-key 092164A7
http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0x0921 64A7
--=-0a9q+ENa+GdqxYo2M145
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Ceci est une partie de message
=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQBNinxctXI/OwkhZKcRAuY3AJ4o1HYcbZL2IUtYrasMOEiwA/1iqACd FURJ
SL1KxKB7ayzvTk4uBzCxJYs=
=oCGc
-----END PGP SIGNATURE-----
--=-0a9q+ENa+GdqxYo2M145--
