mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-03-31 20:10:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

endecode_test.c: Add warning that 512-bit DH key size is for testing only

Browse Source 
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13568)
This commit is contained in:
Dr. David von Oheimb 2020-11-29 12:46:12 +01:00
parent 20f8bc7255
commit 1234aa7e41
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
test/endecode_test.c
View File

@ -46,7 +46,10 @@ static EVP_PKEY *make_template(const char *type, OSSL_PARAM *genparams)
EVP_PKEY_CTX *ctx = NULL;
#ifndef OPENSSL_NO_DH
/* use DH(X) keys with predetermined parameters for efficiency */
/*
* Use 512-bit DH(X) keys with predetermined parameters for efficiency,
* for testing only. Use a minimum key size of 2048 for security purposes.
*/
if (strcmp(type, "DH") == 0)
return get_dh512(NULL);
if (strcmp(type, "X9.42 DH") == 0)