| dhparam.pod (238405) | dhparam.pod (269682) |
|---|---|
| 1=pod 2 3=head1 NAME 4 5dhparam - DH parameter manipulation and generation 6 7=head1 SYNOPSIS 8 9B<openssl dhparam> 10[B<-inform DER|PEM>] 11[B<-outform DER|PEM>] 12[B<-in> I<filename>] 13[B<-out> I<filename>] 14[B<-dsaparam>] | 1=pod 2 3=head1 NAME 4 5dhparam - DH parameter manipulation and generation 6 7=head1 SYNOPSIS 8 9B<openssl dhparam> 10[B<-inform DER|PEM>] 11[B<-outform DER|PEM>] 12[B<-in> I<filename>] 13[B<-out> I<filename>] 14[B<-dsaparam>] |
| 15[B<-check>] |
|
| 15[B<-noout>] 16[B<-text>] 17[B<-C>] 18[B<-2>] 19[B<-5>] 20[B<-rand> I<file(s)>] 21[B<-engine id>] 22[I<numbits>] --- 36 unchanged lines hidden (view full) --- 59that (p-1)/2 is also prime) will be used for DH parameter generation. 60 61DH parameter generation with the B<-dsaparam> option is much faster, 62and the recommended exponent length is shorter, which makes DH key 63exchange more efficient. Beware that with such DSA-style DH 64parameters, a fresh DH key should be created for each use to 65avoid small-subgroup attacks that may be possible otherwise. 66 | 16[B<-noout>] 17[B<-text>] 18[B<-C>] 19[B<-2>] 20[B<-5>] 21[B<-rand> I<file(s)>] 22[B<-engine id>] 23[I<numbits>] --- 36 unchanged lines hidden (view full) --- 60that (p-1)/2 is also prime) will be used for DH parameter generation. 61 62DH parameter generation with the B<-dsaparam> option is much faster, 63and the recommended exponent length is shorter, which makes DH key 64exchange more efficient. Beware that with such DSA-style DH 65parameters, a fresh DH key should be created for each use to 66avoid small-subgroup attacks that may be possible otherwise. 67 |
| 68=item B<-check> 69 70check if the parameters are valid primes and generator. 71 |
|
| 67=item B<-2>, B<-5> 68 69The generator to use, either 2 or 5. 2 is the default. If present then the 70input file is ignored and parameters are generated instead. 71 72=item B<-rand> I<file(s)> 73 74a file or files containing random data used to seed the random number --- 67 unchanged lines hidden --- | 72=item B<-2>, B<-5> 73 74The generator to use, either 2 or 5. 2 is the default. If present then the 75input file is ignored and parameters are generated instead. 76 77=item B<-rand> I<file(s)> 78 79a file or files containing random data used to seed the random number --- 67 unchanged lines hidden --- |