Re: comments on web crypto API: Diffie-Hellman parameters [3/6]

On Thu, May 23, 2013 at 1:42 AM, Nikos Mavrogiannopoulos
<> wrote:
> The diffie-hellman parameters in 19.13.3 are restricted to the prime and
> generator. With that information special parameters that allow for
> optimizations (see "Computational Introduction to Number Theory and Algebra"
> by V. Shoup) are not allowed (an example is when p=2wq+1). An easy way to
> overcome this restriction would be to add an additional parameter that
> indicates the desired size of the private key, similarly to PKCS #3 format
> for DH.

This omission was intentional, due to lack of wide implementation of support.

You can see such design decisions in other algorithm parameter
choices, such as the lack of selection of MGF algorithm in OAEP/PSS,
even though some implementations (eg: PKCS#11) may allow for such

Received on Thursday, 23 May 2013 17:13:46 UTC