> If you try to select your own parameters you're probably going to pick wrong, either in the sense of breaking the crypto Is there any known situation in whi

> If you try to select your own parameters you're probably going to pick wrong, either in the sense of breaking the crypto Is there any known situation in which generating parameters with 'openssl dhparam' will give you broken/weak parameters? > either in the sense of breaking the crypto or making people wonder if you selected your parameters to hide a backdoor This is a concern if you're going to distribute your parameters with software, but it could make sense where a sysadmin controls both endpoints, such as a site-to-site VPN.