diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2011-12-07 00:42:22 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2011-12-07 00:42:22 +0000 |
| commit | 618eb125f01c64640ff86f343c9dc1d037499175 (patch) | |
| tree | 268621f282292f0c6f85d7395a0ee1b8ca0989e6 | |
| parent | afb14cda8c70d18b97bbf3419bd308ba5b65f3b9 (diff) | |
Document RFC5114 "generation" options.
| -rw-r--r-- | doc/apps/genpkey.pod | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/doc/apps/genpkey.pod b/doc/apps/genpkey.pod index 1611b5ca78..84f9edb2d7 100644 --- a/doc/apps/genpkey.pod +++ b/doc/apps/genpkey.pod @@ -126,6 +126,15 @@ The number of bits in the prime parameter B<p>. The value to use for the generator B<g>. +=item B<dh_rfc5114:num> + +If this option is set then the appropriate RFC5114 parameters are used +instead of generating new parameters. The value B<num> can take the +values 1, 2 or 3 corresponding to RFC5114 DH parameters consisting of +1024 bit group with 160 bit subgroup, 2048 bit group with 224 bit subgroup +and 2048 bit group with 256 bit subgroup as mentioned in RFC5114 sections +2.1, 2.2 and 2.3 respectively. + =back =head1 EC PARAMETER GENERATION OPTIONS @@ -204,6 +213,10 @@ Generate 1024 bit DH parameters: openssl genpkey -genparam -algorithm DH -out dhp.pem \ -pkeyopt dh_paramgen_prime_len:1024 +Output RFC5114 2048 bit DH parameters with 224 bit subgroup: + + openssl genpkey -genparam -algorithm DH -out dhp.pem -pkeyopt dh_rfc5114:2 + Generate DH key from parameters: openssl genpkey -paramfile dhp.pem -out dhkey.pem |