]> git.ipfire.org Git - thirdparty/strongswan.git/commit
diffie-hellman: Don't set exponent length for DH groups with prime order subgroups
authorTobias Brunner <tobias@strongswan.org>
Tue, 13 Mar 2018 11:13:47 +0000 (12:13 +0100)
committerTobias Brunner <tobias@strongswan.org>
Wed, 21 Mar 2018 09:21:32 +0000 (10:21 +0100)
commit8b6f61574178b675d0e702db0b509286c0d635d3
treebc554c7d11cfd83034a9b2f927983f811ba97b6d
parentee019ab321187a56389e885080a841d6ec1b78dc
diffie-hellman: Don't set exponent length for DH groups with prime order subgroups

According to RFC 5114 the exponent length for these groups should always equal
the size of their prime order subgroup.
This was handled correctly before the initialization was done during
library initialization.

Fixes: 46184b07c163 ("diffie-hellman: Explicitly initialize DH exponent sizes during initialization")
src/libstrongswan/crypto/diffie_hellman.c