我想在 openssl 中为 diffiehellman 更改 P 和 G 的值

Question

Since parameter generation can be an expensive process this is normally done once in advance and then the same set of parameters are used over many key exchanges. Is there any way to modify p and g before its advance set up?

Answer 1

If you use openssl command, you can try asn1...

# cat dh.conf
asn1=SEQUENCE:dh_key

[dh_key]
p=INTEGER:0x97
g=INTEGER:5

# openssl dh -in newkey.der -inform der -text -check
    DH Parameters: (7 bit)
    prime: 97 (0x61)
    generator: 5 (0x5)
p value is not a safe prime
-----BEGIN DH PARAMETERS-----
MAYCAWECAQU=
-----END DH PARAMETERS-----

the above implements the simple dh math, ie

> Alice Bob wants to change key...
> Let p =97 and g=5
> and XA=36 and XB=58
> so YA=g^XA mod p = 50
>    YB=g^XB mod p = 44
> thus Alice：K=(YB) ^XA mod p=75 
>      Bob：  K=(YA) ^XB mod p=75