[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

About Diffie-Hellman algorithm and Shamir threshold



Hi, I have two problems. The first is about Diffie-Hellman algorithm. In
PKIX part1, now
rfc2459, the algorithm is described as:

OID:    1.2.840.10046.2.1
DomainParameters ::= SEQUENCE {
        p            INTEGER, -- odd prime, p=jq+1
        g            INTEGER, -- generator, g
        q            INTEGER, -- factor of p-1
        j            INTEGER OPTIONAL, -- subgroup factor
        validationParms    ValidationParms OPTIONAL }

ValidationParms    ::= SEQUENCE {
        seed            BIT STRING
    pgenCounter   INTEGER }

while in certificate management protocol, now rfc2510, the algorithms is
described as
below:
OID:    1.2.840.10046.2.1
DHParameter ::= SEQUENCE {
        prime INTEGER, -- p
        base  INTEGER  -- g
}

So which is the most up to date description, and which should I
implement?