Using dsaparam instead of generator options
abefleming opened this issue · 1 comments
abefleming commented
Openssl allows the usage of -dsaparam in the place of the recommended -2 or -5. Runtime is significantly reduced with -dsaparam, but there is a concern of the strength of using dsa parameters instead and should be investigated.
artis3n commented
Honestly, that needs to be re-done to generate ECDH parameters instead of DH parameters.