Re: openssl and DSA q size doubt

[Billy Brumley]

Howdy,

But  my question is why q is not 160 bits but instead 224 bits was used by 
openssl since the FIPS 186 standard clearly says to use q size 160 bits for p 
size 1024 bits?

Can someone familiar with the topic, clarify my doubt please? Maybe I missed 
some fine points in the standard.

I'd suggest using `genpkey` instead of `dsaparam`, like so:



Cheers,

BBB

openssl genpkey -genparam -algorithm DSA -pkeyopt pbits:1024 -pkeyopt qbits:160

smime.p7s
Description: S/MIME Cryptographic Signature