4 ms·
>there is no indication of how these parameters were chosen Is there really no protocol used in projects undertaken by the security community that would ensure
by natch 11y ago
>there is no indication of how these parameters were chosen
Is there really no protocol used in projects undertaken by the security community that would ensure that each component of the tools we rely on has a known history?
- gcommer 11y agoWell, socat has a git repo at git://repo.or.cz/socat.git so you can see the history of the prime number. In particular, it was upgraded from a 512 bit prime to a 1024 bit "prime" in commit 281d1bd on Jan 23, 2015. Neither the code then, or the new code in this patch, have comments indicating how the prime was generated. (It is only mentioned in the advisory that openssl dhparams was used for the recent patch)