Handle provable prime parameters for canonical g generation which are
authorDr. Stephen Henson <steve@openssl.org>
Sun, 25 Sep 2011 22:04:43 +0000 (22:04 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Sun, 25 Sep 2011 22:04:43 +0000 (22:04 +0000)
sometimes erroneously included.

fips/dsa/fips_dssvs.c

index d355fcb..3362a33 100644 (file)
@@ -202,6 +202,12 @@ static void pqg(FILE *in, FILE *out)
            q=hex2bn(value);
        else if(!strcmp(keyword,"domain_parameter_seed"))
            seedlen = hex2bin(value, seed);
+       else if(!strcmp(keyword,"firstseed"))
+           seedlen = hex2bin(value, seed);
+       else if(!strcmp(keyword,"pseed"))
+           seedlen += hex2bin(value, seed + seedlen);
+       else if(!strcmp(keyword,"qseed"))
+           seedlen += hex2bin(value, seed + seedlen);
        else if(!strcmp(keyword,"index"))
            {
            idxlen = hex2bin(value, idtmp);