Mailing List Archive

maths
moduli-gen/Makefile: 7 Kibit are 7168, not 7680

bye,
//mirabilos
--
15:41?<Lo-lan-do:#fusionforge> Somebody write a testsuite for helloworld :-)
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
Re: maths [ In reply to ]
On Sat, 7 Nov 2020 at 09:00, Thorsten Glaser <t.glaser@tarent.de> wrote:
> moduli-gen/Makefile: 7 Kibit are 7168, not 7680

It's 7680 because that's the size recommended in NIST Special
Publication 800-57 for security equivalent to 192 bits of symmetric
cipher. See the comments at
https://github.com/openssh/openssh-portable/blob/master/dh.c#L473

--
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA (new)
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
Re: maths [ In reply to ]
On Sat, 7 Nov 2020, Darren Tucker wrote:

> On Sat, 7 Nov 2020 at 09:00, Thorsten Glaser <t.glaser@tarent.de> wrote:
> > moduli-gen/Makefile: 7 Kibit are 7168, not 7680
>
> It's 7680 because that's the size recommended in NIST Special
> Publication 800-57 for security equivalent to 192 bits of symmetric
> cipher. See the comments at
> https://github.com/openssh/openssh-portable/blob/master/dh.c#L473

Ah, okay, thanks for the reference.

Might want to put that link into the Makefile, as comment.

bye,
//mirabilos
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev