Change DH parameters to generate the order q subgroup instead of 2q
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 10 Jul 2019 13:52:36 +0000 (15:52 +0200)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 24 Jul 2019 12:59:52 +0000 (14:59 +0200)
commitddd16c2fe988ed9fdd5118c2f2617745438fd675
tree08eb4554b256062b40bbc9885edf2153c2b87fcf
parent8e747338593f3bafe9798226cddf4edf36bc2de9
Change DH parameters to generate the order q subgroup instead of 2q

This avoids leaking bit 0 of the private key.

Backport-of: #9363

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/9435)
CHANGES
crypto/dh/dh_check.c
crypto/dh/dh_gen.c
crypto/dh/dh_key.c
test/dhtest.c