Handle provable prime parameters for canonical g generation which are

sometimes erroneously included.

diff --git a/fips/dsa/fips_dssvs.c b/fips/dsa/fips_dssvs.c
index d355fcb6ff10220fae0f15c0444209fea625b8bb..3362a33e6cb747f5a146ee81340b459c08de228f 100644 (file)
--- a/fips/dsa/fips_dssvs.c
+++ b/fips/dsa/fips_dssvs.c
@@ -202,6 +202,12 @@ static void pqg(FILE *in, FILE *out)
            q=hex2bn(value);
        else if(!strcmp(keyword,"domain_parameter_seed"))
            seedlen = hex2bin(value, seed);
+       else if(!strcmp(keyword,"firstseed"))
+           seedlen = hex2bin(value, seed);
+       else if(!strcmp(keyword,"pseed"))
+           seedlen += hex2bin(value, seed + seedlen);
+       else if(!strcmp(keyword,"qseed"))
+           seedlen += hex2bin(value, seed + seedlen);
        else if(!strcmp(keyword,"index"))
            {
            idxlen = hex2bin(value, idtmp);