10 Dec
2013
10 Dec
'13
8:08 a.m.
On Mon, Dec 9, 2013 at 10:34 PM, Niels Möller nisse@lysator.liu.se wrote:
I think having a limitation that q_size < p_size/2 is pretty much reasonable. The recommendations for DH parameters have q_size << p_size/2.
Good to know. I was thinking that, e.g., p_size = q_size + 1 (and p = 2q
- was important. But maybe that's a special case, and the general
case of q_size close to p_size is not very important?
Other implementations use it (or more precise they use safe primes rather than set q explicitly). If that use-case is required, having a different function to generate safe primes seems good enough.
regards, Nikos