Yes I used the same generator,'5'.  So that means I need to use the
same prime too for both the parties

On 4/22/11, Dave Thompson <dthomp...@prinpay.com> wrote:
>>      From: owner-openssl-us...@openssl.org On Behalf Of Prashant Batra
>>      Sent: Thursday, 21 April, 2011 09:16
>
>>      Hi, I tried the dhtest sample provided in the test folder of
> openssl-0.9.8g.
>>      What it does is-
>>      Creates 2 DH objects using a single prime and generator value.
>> It then calculates the public, private keys pairs using the 2 DH's.
>>      Then computes the secret for each DH using the public key of
>> the other DH. The secrets should match ad it does so.
>>      It works fine.
>
>>      But now, I modified the test program, so that it calls
>> dh_generate_parameters for both the objects,( so that both does not
>> using the same prime value), and do the rest of things similarly.
>
>>      But the secrets calculated does not match. Kindly help.
>
> Of course not. Both parties in a DH exchange MUST use the
> same parameters (prime AND generator, but you used 5 for
> the generator in both cases). THAT'S HOW DH WORKS.
>
>
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org
>


-- 
Prashant Batra
Follow the dreams!!
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to