Previously if DL_Group was given a q value of zero, it would check to

see if (p-1)/2 was prime, and if so set q to that. This is to deal with
certain bogus DH formats (PKCS #3, specifically; the 'modern' ANSI formats
always provide the q subgroup value).

However this required access to the RNG. Rather than push RNG usage all
the way down into that part of DL group, simply remove the feature.

Since PKCS #3 format is only really used for DH keys, it will not much
affect anything functionally (that I can see).

0 files changed, 0 insertions, 0 deletions