Howdy,
But my question is why q is not 160 bits but instead 224 bits was used by openssl since the FIPS 186 standard clearly says to use q size 160 bits for p size 1024 bits? Can someone familiar with the topic, clarify my doubt please? Maybe I missed some fine points in the standard.
I'd suggest using `genpkey` instead of `dsaparam`, like so:openssl genpkey -genparam -algorithm DSA -pkeyopt pbits:1024 -pkeyopt qbits:160
Cheers, BBB
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
