mirror of
https://github.com/QuasarApp/openssl.git
synced 2025-05-02 12:39:38 +00:00
endecode_test.c: Add warning that 512-bit DH key size is for testing only
Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13568)
This commit is contained in:
parent
20f8bc7255
commit
1234aa7e41
@ -46,7 +46,10 @@ static EVP_PKEY *make_template(const char *type, OSSL_PARAM *genparams)
|
|||||||
EVP_PKEY_CTX *ctx = NULL;
|
EVP_PKEY_CTX *ctx = NULL;
|
||||||
|
|
||||||
#ifndef OPENSSL_NO_DH
|
#ifndef OPENSSL_NO_DH
|
||||||
/* use DH(X) keys with predetermined parameters for efficiency */
|
/*
|
||||||
|
* Use 512-bit DH(X) keys with predetermined parameters for efficiency,
|
||||||
|
* for testing only. Use a minimum key size of 2048 for security purposes.
|
||||||
|
*/
|
||||||
if (strcmp(type, "DH") == 0)
|
if (strcmp(type, "DH") == 0)
|
||||||
return get_dh512(NULL);
|
return get_dh512(NULL);
|
||||||
if (strcmp(type, "X9.42 DH") == 0)
|
if (strcmp(type, "X9.42 DH") == 0)
|
||||||
|
Loading…
x
Reference in New Issue
Block a user