Change DH parameters to generate the order q subgroup instead of 2q
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 10 Jul 2019 13:52:36 +0000 (15:52 +0200)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Mon, 22 Jul 2019 18:03:27 +0000 (20:03 +0200)
commita38c878c2e5e05016bc9faa8d0828eb96efba1c2
tree18485904f5e8438f97b9a4f0bac4292b527255a7
parentd4c69c69d171edb17b4d609c15891a9599809ed0
Change DH parameters to generate the order q subgroup instead of 2q

This avoids leaking bit 0 of the private key.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/9363)
CHANGES
apps/dhparam.c
crypto/dh/dh_check.c
crypto/dh/dh_gen.c
crypto/dh/dh_key.c
doc/man1/dhparam.pod
include/openssl/dh.h
test/dhtest.c