arne
/
cryptopp
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make 2048-bit modulus default for DSA (GH #571)

pull/574/head
Jeffrey Walton 2018-01-23 13:19:27 -05:00
parent dfb6f0dbc2
commit d72b516c29
No known key found for this signature in database
GPG Key ID: B36AB348921B1838
4 changed files with 24 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
dsa.h
View File

@ -13,7 +13,7 @@ NAMESPACE_BEGIN(CryptoPP)
/// \brief DSA Signature Format /// \brief DSA Signature Format
/// \details The DSA signature format used by Crypto++ is as defined by IEEE P1363. /// \details The DSA signature format used by Crypto++ is as defined by IEEE P1363.
/// Java nad .Net use the DER format, and OpenPGP uses the OpenPGP format. /// Java and .Net use the DER format, and OpenPGP uses the OpenPGP format.
enum DSASignatureFormat { enum DSASignatureFormat {
/// \brief Crypto++ native signature encoding format /// \brief Crypto++ native signature encoding format
DSA_P1363, DSA_P1363,

2
gfpcrypt.cpp
View File

@ -45,7 +45,7 @@ void DL_GroupParameters_DSA::GenerateRandom(RandomNumberGenerator &rng, const Na
} }
else else
{ {
int modulusSize = 1024, defaultSubgroupOrderSize; int modulusSize = 2048, defaultSubgroupOrderSize;
alg.GetIntValue("ModulusSize", modulusSize) || alg.GetIntValue("KeySize", modulusSize); alg.GetIntValue("ModulusSize", modulusSize) || alg.GetIntValue("KeySize", modulusSize);
switch (modulusSize) switch (modulusSize)

24
gfpcrypt.h
View File

@ -628,9 +628,27 @@ struct DL_Keys_DSA
/// \brief DSA signature scheme /// \brief DSA signature scheme
/// \tparam H HashTransformation derived class /// \tparam H HashTransformation derived class
/// \details The class is named DSA2 instead of DSA for backwards compatibility because DSA was a non-template class. /// \details The class is named DSA2 instead of DSA for backwards compatibility because
/// \sa <a href="http://en.wikipedia.org/wiki/Digital_Signature_Algorithm">DSA</a>, as specified in FIPS 186-3 /// DSA was a non-template class.
/// \since Crypto++ 1.0 for DSA, Crypto++ 5.6.2 for DSA2 /// \details DSA default method GenerateRandom uses a 2048-bit modulus and a 224-bit subgoup by default.
/// The modulus can be changed using the following code:
/// <pre>
/// DSA::PrivateKey privateKey;
/// privateKey.GenerateRandomWithKeySize(prng, 2048);
/// </pre>
/// \details The subgroup order can be changed using the following code:
/// <pre>
/// AlgorithmParameters params = MakeParameters
/// (Name::ModulusSize(), 2048)
/// (Name::SubgroupOrderSize(), 256);
///
/// DSA::PrivateKey privateKey;
/// privateKey.GenerateRandom(prng, params);
/// </pre>
/// \sa <a href="http://en.wikipedia.org/wiki/Digital_Signature_Algorithm">DSA</a>, as specified in FIPS 186-3,
/// <a href="https://www.cryptopp.com/wiki/Digital_Signature_Algorithm">Digital Signature Algorithm</a> on the wiki, and
/// <a href="https://www.cryptopp.com/wiki/NameValuePairs">NameValuePairs</a> on the wiki.
/// \since Crypto++ 1.0 for DSA, Crypto++ 5.6.2 for DSA2, Crypto++ 6.1 for 2048-bit modulus.
template <class H> template <class H>
class DSA2 : public DL_SS< class DSA2 : public DL_SS<
DL_Keys_DSA, DL_Keys_DSA,

2
tiger.h
View File

@ -18,7 +18,7 @@
NAMESPACE_BEGIN(CryptoPP) NAMESPACE_BEGIN(CryptoPP)
/// \brief Tiger message digest /// \brief Tiger message digest
/// \sa <a href="http://www.cryptolounge.org/wiki/Tiger">Tiger</a> /// \sa <a href="http://www.cryptolounge.org/wiki/Tiger">Tiger</a>
/// \since Crypto++ 2.1 /// \since Crypto++ 2.1
class Tiger : public IteratedHashWithStaticTransform<word64, LittleEndian, 64, 24, Tiger> class Tiger : public IteratedHashWithStaticTransform<word64, LittleEndian, 64, 24, Tiger>