From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Fri, 22 Aug 2014 06:17:17 +0000 (+0200)
Subject: Revert "removed pbits=1024, qbits=160 from the acceptable bit sizes in FIPS140-2... 
X-Git-Tag: gnutls_3_4_0~1048
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=fea7d0aa4de9569331f3f5f4c00b58cdffac42f8;p=thirdparty%2Fgnutls.git

Revert "removed pbits=1024, qbits=160 from the acceptable bit sizes in FIPS140-2 DSA parameter generation."

This reverts commit 110527d9bb9ca70a66ae8173769067f133fd3cf7.
---

diff --git a/lib/nettle/int/dsa-keygen-fips186.c b/lib/nettle/int/dsa-keygen-fips186.c
index 9ab00a9dc7..06338c92ed 100644
--- a/lib/nettle/int/dsa-keygen-fips186.c
+++ b/lib/nettle/int/dsa-keygen-fips186.c
@@ -39,6 +39,10 @@
 unsigned _dsa_check_qp_sizes(unsigned q_bits, unsigned p_bits)
 {
 	switch (q_bits) {
+	case 160:
+		if (p_bits != 1024)
+			return 0;
+		break;
 	case 224:
 		if (p_bits != 2048)
 			return 0;