Lines Matching +full:- +full:4 +full:g

5 EVP_PKEY-FFC - EVP_PKEY DSA and DH/DHX shared FFC parameters.
11 Diffie-Hellman key establishment algorithms specified in SP800-56A can also be
18 I<p>, I<q> and I<g>.
20 For B<DSA> (and B<DH> that is not a named group) the FIPS186-4 standard
29 The B<DH> key type uses PKCS#3 format which saves p and g, but not the 'q' value.
31 must be used for FIPS186-4.
36 L<provider-keymgmt(7)/Common parameters>), the B<DSA>, B<DH> and B<DHX> keytype
39 =over 4
53 =over 4
57 A DSA or Diffie-Hellman prime "p" value.
59 =item "g" (B<OSSL_PKEY_PARAM_FFC_G>) <unsigned integer>
61 A DSA or Diffie-Hellman generator "g" value.
67 =over 4
71 A DSA or Diffie-Hellman prime "q" value.
76 of I<p>, I<q> and canonical I<g>.
82 I<g>.
84 then be reused during key validation to verify the value of I<g>. If this value
85 is not set or is -1 then unverifiable generation of the generator I<g> will be
95 For unverifiable generation of the generator I<g> this value is output during
96 generation of I<g>. Its value is the first integer larger than one that
97 satisfies g = h^j mod p (where g != 1 and "j" is the cofactor).
101 An optional informational cofactor parameter that should equal to (p - 1) / q.
103 =item "validate-pq" (B<OSSL_PKEY_PARAM_FFC_VALIDATE_PQ>) <unsigned integer>
105 =item "validate-g" (B<OSSL_PKEY_PARAM_FFC_VALIDATE_G>) <unsigned integer>
107 These boolean values are used during FIPS186-4 or FIPS186-2 key validation checks
109 I<validate-pq> and I<validate-g> are both set to 1 to check that p,q and g are
113 =item "validate-legacy" (B<OSSL_PKEY_PARAM_FFC_VALIDATE_LEGACY>) <unsigned integer>
117 value of 0 selects FIPS186-4 validation. Setting this value to 1 selects
118 FIPS186-2 validation.
126 =over 4
132 =over 4
191 The following sections of SP800-56Ar3:
193 =over 4
199 The following sections of FIPS186-4:
201 =over 4
205 =item A.2.3 Generation of canonical generator g.
207 =item A.2.1 Unverifiable Generation of the Generator g.
213 L<EVP_PKEY-DSA(7)>,
214 L<EVP_PKEY-DH(7)>,
215 L<EVP_SIGNATURE-DSA(7)>,
216 L<EVP_KEYEXCH-DH(7)>
219 L<provider-keymgmt(7)>,
220 L<OSSL_PROVIDER-default(7)>,
221 L<OSSL_PROVIDER-FIPS(7)>,
225 Copyright 2020-2022 The OpenSSL Project Authors. All Rights Reserved.