From 186b50d24e6603460b987a15b4c15782b836a9a8 Mon Sep 17 00:00:00 2001 From: Bernd Edlinger Date: Wed, 10 Jul 2019 21:33:48 +0200 Subject: [PATCH] Update documentation of BN_generate_prime_ex Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/9387) --- doc/man3/BN_generate_prime.pod | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/doc/man3/BN_generate_prime.pod b/doc/man3/BN_generate_prime.pod index 31fbc1ffa1..d26e0a99c8 100644 --- a/doc/man3/BN_generate_prime.pod +++ b/doc/man3/BN_generate_prime.pod @@ -52,7 +52,9 @@ Deprecated: BN_generate_prime_ex() generates a pseudo-random prime number of at least bit length B. The returned number is probably prime -with a negligible error. +with a negligible error. If B is B the returned prime +number will have exact bit length B with the top most two +bits set. If B is not B, it will be used to store the number. @@ -89,7 +91,9 @@ If B is not B, the prime will fulfill the condition p % B generator. If B is true, it will be a safe prime (i.e. a prime p so -that (p-1)/2 is also prime). +that (p-1)/2 is also prime). If B is true, and B == B +the condition will be p % B == 3. +It is recommended that B is a multiple of 4. The random generator must be seeded prior to calling BN_generate_prime_ex(). If the automatic seeding or reseeding of the OpenSSL CSPRNG fails due to -- 2.25.1