Alter one of the constructors of DL_Group to take a parameter specifying

how big q should be.

Add FIPS 186-3 DSA parameter generation, this allows for generating larger
(2048 and 3072 bit) DSA keys. At this time there do not seem to be official
test vectors for 186-3, and I have not checked against other implementations.
Tests will be constructed using the latest OpenSSL snapshot.

1 files changed, 5 insertions, 4 deletions

diff --git a/include/dl_group.h b/include/dl_group.h
index 6cd46c1c4..9c503b5f3 100644
--- a/include/dl_group.h
+++ b/include/dl_group.h
@@ -33,15 +33,16 @@ class DL_Group
 
       DL_Group();
       DL_Group(const std::string&);
-      DL_Group(u32bit, PrimeType = Strong);
+      DL_Group(PrimeType, u32bit, u32bit = 0);
       DL_Group(const MemoryRegion<byte>&, u32bit = 1024, u32bit = 0);
       DL_Group(const BigInt&, const BigInt&);
       DL_Group(const BigInt&, const BigInt&, const BigInt&);
    private:
       static BigInt make_dsa_generator(const BigInt&, const BigInt&);
-      static SecureVector<byte> generate_dsa_primes(BigInt&, BigInt&, u32bit);
-      static bool generate_dsa_primes(BigInt&, BigInt&, const byte[], u32bit,
-                                      u32bit, u32bit = 0);
+      static SecureVector<byte> generate_dsa_primes(BigInt&, BigInt&,
+                                                    u32bit, u32bit);
+      static bool generate_dsa_primes(BigInt&, BigInt&, u32bit, u32bit,
+                                      const MemoryRegion<byte>&);
 
       void init_check() const;
       void initialize(const BigInt&, const BigInt&, const BigInt&);