L=3072, N=256 provides 128 bits of security not 112.

diff --git a/crypto/dsa/dsa_gen.c b/crypto/dsa/dsa_gen.c
index c013a7e660ea0d95a49af481118823c65a1707fb..d5f4debc9223419de117c5374edc3930abd318d4 100644 (file)
--- a/crypto/dsa/dsa_gen.c
+++ b/crypto/dsa/dsa_gen.c
@@ -405,7 +405,7 @@ static int dsa2_valid_parameters(size_t L, size_t N)
        if (L == 2048 && N == 256)
                return 112;
        if (L == 3072 && N == 256)
-               return 112;
+               return 128;
        return 0;
        }