Re: [Cfrg] What groups to use for Diffie Hellman?

[jonas weber <[e-mail]>]

Peter,

 

In your last post on this topic you write:

 

On a related subject, is there any interest in an RFC that just lists, say,
ten DH parameter sets of various sizes with their generation machanism to
allow replication?  So no list of things you can and can't do, just the
parameters to use wherever you want.  My code uses Lim-Lee, as long as people
don't object to that I can generate them by that process, it'd just mean you'd
need another implementation that can handle verifying primes of the form
'p = 2 * q * ( prime[1] * ... prime[n] ) + 1'.

I'd also supply them as bignums of 32- and 64-bit words, since that's how
they're going to end up in people's code and it'll save lots of developers
having to manually reformat them from whatever form they're otherwise
published in.

 

Given the uncertainty over the RFC-5114 groups, I believe it would be helpful to have an RFC with a list of primes as you describe. Many of us use shorter exponents to save computation and having a list of verifiable primes would be useful, particularly if they could be registered for use in IKE and TLS.

 

Regards,

 

Jonas