Fix DH_get_nid() so that it does not cache values.

[openssl.git] / crypto / dsa / dsa_key.c

diff --git a/crypto/dsa/dsa_key.c b/crypto/dsa/dsa_key.c
index 1d625272e506681fee26b6ef70ebeba17a2a9979..f9bb3470f6436b4b842ba0c87db14baaba4f016c 100644 (file)
--- a/crypto/dsa/dsa_key.c
+++ b/crypto/dsa/dsa_key.c
@@ -74,6 +74,11 @@ static int dsa_keygen(DSA *dsa, int pairwise_test)
         priv_key = dsa->priv_key;
     }
 
         priv_key = dsa->priv_key;
     }
 

+    /*
+     * For FFC FIPS 186-4 keygen
+     * security strength s = 112,
+     * Max Private key size N = len(q)
+     */

     if (!ffc_generate_private_key(ctx, &dsa->params, BN_num_bits(dsa->params.q),
                                   MIN_STRENGTH, priv_key))
         goto err;
     if (!ffc_generate_private_key(ctx, &dsa->params, BN_num_bits(dsa->params.q),
                                   MIN_STRENGTH, priv_key))
         goto err;