diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2020-11-29 10:01:16 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-11-29 11:01:16 -0500 |
| commit | 4645f02c25d7d336a6d922e428c72beb55fb04cb (patch) | |
| tree | 8e84d507468e4a81d50a34a0afc4f6d9a641b6e5 /docs/development | |
| parent | fd7ed6704087f1d71781e48e6c268341429b3abc (diff) | |
| download | cryptography-4645f02c25d7d336a6d922e428c72beb55fb04cb.tar.gz | |
disallow p less than 512-bit on DH (#5592)
* disallow p less than 512-bit on DH
OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere
that's practical for us. (Note that we do not enforce on deserializing
PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the
3.0.0 support branch we can test an error path)
* missing test
* black
* _MIN_MODULUS_SIZE is now a thing
* skip on fips
Diffstat (limited to 'docs/development')
| -rw-r--r-- | docs/development/test-vectors.rst | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/development/test-vectors.rst b/docs/development/test-vectors.rst index 6146c9c13..f952337e2 100644 --- a/docs/development/test-vectors.rst +++ b/docs/development/test-vectors.rst @@ -184,6 +184,8 @@ Key exchange ``vectors/cryptography_vectors/asymmetric/DH/dhkey_rfc5114_2.der`` and ``vectors/cryptography_vectors/asymmetric/DH/dhpub_rfc5114_2.der`` contains are the above parameters and keys in DER format. +* ``vectors/cryptography_vectors/asymmetric/DH/dh_key_256.pem`` contains + a PEM PKCS8 encoded DH key with a 256-bit key size. * ``vectors/cryptoraphy_vectors/asymmetric/ECDH/brainpool.txt`` contains Brainpool vectors from :rfc:`7027`. |