Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add more DH sizes. Addresses #208. #214

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add more DH sizes. Addresses #208. #214

wants to merge 1 commit into from

Conversation

lgarron
Copy link
Collaborator

@lgarron lgarron commented Oct 6, 2016

This is a draft for #208.

TODO:

  • Generate precomputed values and stick them in certs/sets/{test, prod}/pregen/dhparam
    • Generate huge values
    • Generate non-power-of-2 values
  • Generate ssl_dhparam configs for all the values that share cipher definitions. (Possibly avoid creating individual files for each of them in nginx-includes?)
  • Try to use a single .conf file for all the domains using the same HTML template. May need to use string filters to chop the dh part off the subdomain.

See https://github.com/chromium/badssl.com/pull/43/files for a previous DH example.

@april
Copy link
Collaborator

april commented Nov 8, 2016

Merging #221 would take care of that first one, I believe. Do we want me to try for 64kb? It could take a year or two to generate!

@lgarron lgarron force-pushed the master branch 3 times, most recently from 903cb3b to 5affce5 Compare March 17, 2017 01:15
@lgarron lgarron force-pushed the master branch 3 times, most recently from 7d8ea9f to ae0f2c8 Compare April 13, 2017 23:13
@prefixtitle
Copy link
Contributor

Are you still looking for DH sizes over 32768-bit?
Are you still looking for DH generated in non power of 2?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants