adjusted subgroup bits to be compatible with DSA requirements.

diff --git a/lib/algorithms/secparams.c b/lib/algorithms/secparams.c
index 288243c36ff9fc2029f474d84c1b868ec64c15e6..6455406593238a605dda61b65cd66a6b4b3b2dba 100644 (file)
--- a/lib/algorithms/secparams.c
+++ b/lib/algorithms/secparams.c
@@ -39,7 +39,7 @@ typedef struct {
 
 static const gnutls_sec_params_entry sec_params[] = {
        {"Insecure", GNUTLS_SEC_PARAM_INSECURE, 0, 0, 0, 0, 0},
-       {"Export", GNUTLS_SEC_PARAM_EXPORT, 42, 512, 0, 150, 0},
+       {"Export", GNUTLS_SEC_PARAM_EXPORT, 42, 512, 0, 160, 0},
        {"Very weak", GNUTLS_SEC_PARAM_VERY_WEAK, 64, 767, 0, 160, 0},
        {"Weak", GNUTLS_SEC_PARAM_WEAK, 72, 1008, 1024, 160, 160},
 #ifdef ENABLE_FIPS140