From 481e48f3236be42ff1fcb96f96c4efcbb2b69242 Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Fri, 26 Jun 2020 09:43:02 +0200 Subject: [PATCH 1/2] dh-primes: add MODP primes from RFC 3526 Signed-off-by: Daiki Ueno --- lib/dh-primes.c | 933 ++++++++++++++++++++++++++++++++++++++++++++++++ lib/dh.h | 29 ++ 2 files changed, 962 insertions(+) diff --git a/lib/dh-primes.c b/lib/dh-primes.c index d785584d0..5d2dce0fb 100644 --- a/lib/dh-primes.c +++ b/lib/dh-primes.c @@ -960,4 +960,937 @@ const gnutls_datum_t gnutls_ffdhe_8192_group_generator = { }; const unsigned int gnutls_ffdhe_8192_key_bits = 512; +static const unsigned char modp_generator = 0x02; + +static const unsigned char modp_params_2048[] = { + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, + 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B, 0x80, + 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, + 0x8A, 0x67, 0xCC, 0x74, 0x02, 0x0B, 0xBE, + 0xA6, 0x3B, 0x13, 0x9B, 0x22, 0x51, 0x4A, + 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, + 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, + 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, + 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, + 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, + 0x5E, 0x7E, 0xC6, 0xF4, 0x4C, 0x42, 0xE9, + 0xA6, 0x37, 0xED, 0x6B, 0x0B, 0xFF, 0x5C, + 0xB6, 0xF4, 0x06, 0xB7, 0xED, 0xEE, 0x38, + 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, 0xAE, + 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, + 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, + 0x3D, 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, + 0xBF, 0x05, 0x98, 0xDA, 0x48, 0x36, 0x1C, + 0x55, 0xD3, 0x9A, 0x69, 0x16, 0x3F, 0xA8, + 0xFD, 0x24, 0xCF, 0x5F, 0x83, 0x65, 0x5D, + 0x23, 0xDC, 0xA3, 0xAD, 0x96, 0x1C, 0x62, + 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, 0x9E, + 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, + 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, + 0x04, 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, + 0x21, 0x7C, 0x32, 0x90, 0x5E, 0x46, 0x2E, + 0x36, 0xCE, 0x3B, 0xE3, 0x9E, 0x77, 0x2C, + 0x18, 0x0E, 0x86, 0x03, 0x9B, 0x27, 0x83, + 0xA2, 0xEC, 0x07, 0xA2, 0x8F, 0xB5, 0xC5, + 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, 0xDE, + 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, + 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, + 0xE5, 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, + 0x05, 0x10, 0x15, 0x72, 0x8E, 0x5A, 0x8A, + 0xAC, 0xAA, 0x68, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xFF, 0xFF, 0xFF +}; + +static const unsigned char modp_q_2048[] = { + 0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xE4, 0x87, 0xED, 0x51, 0x10, 0xB4, + 0x61, 0x1A, 0x62, 0x63, 0x31, 0x45, 0xC0, + 0x6E, 0x0E, 0x68, 0x94, 0x81, 0x27, 0x04, + 0x45, 0x33, 0xE6, 0x3A, 0x01, 0x05, 0xDF, + 0x53, 0x1D, 0x89, 0xCD, 0x91, 0x28, 0xA5, + 0x04, 0x3C, 0xC7, 0x1A, 0x02, 0x6E, 0xF7, + 0xCA, 0x8C, 0xD9, 0xE6, 0x9D, 0x21, 0x8D, + 0x98, 0x15, 0x85, 0x36, 0xF9, 0x2F, 0x8A, + 0x1B, 0xA7, 0xF0, 0x9A, 0xB6, 0xB6, 0xA8, + 0xE1, 0x22, 0xF2, 0x42, 0xDA, 0xBB, 0x31, + 0x2F, 0x3F, 0x63, 0x7A, 0x26, 0x21, 0x74, + 0xD3, 0x1B, 0xF6, 0xB5, 0x85, 0xFF, 0xAE, + 0x5B, 0x7A, 0x03, 0x5B, 0xF6, 0xF7, 0x1C, + 0x35, 0xFD, 0xAD, 0x44, 0xCF, 0xD2, 0xD7, + 0x4F, 0x92, 0x08, 0xBE, 0x25, 0x8F, 0xF3, + 0x24, 0x94, 0x33, 0x28, 0xF6, 0x72, 0x2D, + 0x9E, 0xE1, 0x00, 0x3E, 0x5C, 0x50, 0xB1, + 0xDF, 0x82, 0xCC, 0x6D, 0x24, 0x1B, 0x0E, + 0x2A, 0xE9, 0xCD, 0x34, 0x8B, 0x1F, 0xD4, + 0x7E, 0x92, 0x67, 0xAF, 0xC1, 0xB2, 0xAE, + 0x91, 0xEE, 0x51, 0xD6, 0xCB, 0x0E, 0x31, + 0x79, 0xAB, 0x10, 0x42, 0xA9, 0x5D, 0xCF, + 0x6A, 0x94, 0x83, 0xB8, 0x4B, 0x4B, 0x36, + 0xB3, 0x86, 0x1A, 0xA7, 0x25, 0x5E, 0x4C, + 0x02, 0x78, 0xBA, 0x36, 0x04, 0x65, 0x0C, + 0x10, 0xBE, 0x19, 0x48, 0x2F, 0x23, 0x17, + 0x1B, 0x67, 0x1D, 0xF1, 0xCF, 0x3B, 0x96, + 0x0C, 0x07, 0x43, 0x01, 0xCD, 0x93, 0xC1, + 0xD1, 0x76, 0x03, 0xD1, 0x47, 0xDA, 0xE2, + 0xAE, 0xF8, 0x37, 0xA6, 0x29, 0x64, 0xEF, + 0x15, 0xE5, 0xFB, 0x4A, 0xAC, 0x0B, 0x8C, + 0x1C, 0xCA, 0xA4, 0xBE, 0x75, 0x4A, 0xB5, + 0x72, 0x8A, 0xE9, 0x13, 0x0C, 0x4C, 0x7D, + 0x02, 0x88, 0x0A, 0xB9, 0x47, 0x2D, 0x45, + 0x56, 0x55, 0x34, 0x7F, 0xFF, 0xFF, 0xFF, + 0xFF, 0xFF, 0xFF, 0xFF +}; + +const gnutls_datum_t gnutls_modp_2048_group_prime = { + (void *) modp_params_2048, sizeof(modp_params_2048) +}; +const gnutls_datum_t gnutls_modp_2048_group_q = { + (void *) modp_q_2048, sizeof(modp_q_2048) +}; +const gnutls_datum_t gnutls_modp_2048_group_generator = { + (void *) &modp_generator, sizeof(modp_generator) +}; +const unsigned int gnutls_modp_2048_key_bits = 256; + +static const unsigned char modp_params_3072[] = { + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, + 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B, 0x80, + 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, + 0x8A, 0x67, 0xCC, 0x74, 0x02, 0x0B, 0xBE, + 0xA6, 0x3B, 0x13, 0x9B, 0x22, 0x51, 0x4A, + 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, + 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, + 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, + 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, + 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, + 0x5E, 0x7E, 0xC6, 0xF4, 0x4C, 0x42, 0xE9, + 0xA6, 0x37, 0xED, 0x6B, 0x0B, 0xFF, 0x5C, + 0xB6, 0xF4, 0x06, 0xB7, 0xED, 0xEE, 0x38, + 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, 0xAE, + 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, + 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, + 0x3D, 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, + 0xBF, 0x05, 0x98, 0xDA, 0x48, 0x36, 0x1C, + 0x55, 0xD3, 0x9A, 0x69, 0x16, 0x3F, 0xA8, + 0xFD, 0x24, 0xCF, 0x5F, 0x83, 0x65, 0x5D, + 0x23, 0xDC, 0xA3, 0xAD, 0x96, 0x1C, 0x62, + 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, 0x9E, + 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, + 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, + 0x04, 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, + 0x21, 0x7C, 0x32, 0x90, 0x5E, 0x46, 0x2E, + 0x36, 0xCE, 0x3B, 0xE3, 0x9E, 0x77, 0x2C, + 0x18, 0x0E, 0x86, 0x03, 0x9B, 0x27, 0x83, + 0xA2, 0xEC, 0x07, 0xA2, 0x8F, 0xB5, 0xC5, + 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, 0xDE, + 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, + 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, + 0xE5, 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, + 0x05, 0x10, 0x15, 0x72, 0x8E, 0x5A, 0x8A, + 0xAA, 0xC4, 0x2D, 0xAD, 0x33, 0x17, 0x0D, + 0x04, 0x50, 0x7A, 0x33, 0xA8, 0x55, 0x21, + 0xAB, 0xDF, 0x1C, 0xBA, 0x64, 0xEC, 0xFB, + 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, 0x8A, + 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, + 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, + 0xC7, 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, + 0x33, 0xD7, 0x1E, 0x8C, 0x94, 0xE0, 0x4A, + 0x25, 0x61, 0x9D, 0xCE, 0xE3, 0xD2, 0x26, + 0x1A, 0xD2, 0xEE, 0x6B, 0xF1, 0x2F, 0xFA, + 0x06, 0xD9, 0x8A, 0x08, 0x64, 0xD8, 0x76, + 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, 0x52, + 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, + 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, + 0x6C, 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, + 0x46, 0xE2, 0x08, 0xE2, 0x4F, 0xA0, 0x74, + 0xE5, 0xAB, 0x31, 0x43, 0xDB, 0x5B, 0xFC, + 0xE0, 0xFD, 0x10, 0x8E, 0x4B, 0x82, 0xD1, + 0x20, 0xA9, 0x3A, 0xD2, 0xCA, 0xFF, 0xFF, + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF +}; + +static const unsigned char modp_q_3072[] = { + 0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xE4, 0x87, 0xED, 0x51, 0x10, 0xB4, + 0x61, 0x1A, 0x62, 0x63, 0x31, 0x45, 0xC0, + 0x6E, 0x0E, 0x68, 0x94, 0x81, 0x27, 0x04, + 0x45, 0x33, 0xE6, 0x3A, 0x01, 0x05, 0xDF, + 0x53, 0x1D, 0x89, 0xCD, 0x91, 0x28, 0xA5, + 0x04, 0x3C, 0xC7, 0x1A, 0x02, 0x6E, 0xF7, + 0xCA, 0x8C, 0xD9, 0xE6, 0x9D, 0x21, 0x8D, + 0x98, 0x15, 0x85, 0x36, 0xF9, 0x2F, 0x8A, + 0x1B, 0xA7, 0xF0, 0x9A, 0xB6, 0xB6, 0xA8, + 0xE1, 0x22, 0xF2, 0x42, 0xDA, 0xBB, 0x31, + 0x2F, 0x3F, 0x63, 0x7A, 0x26, 0x21, 0x74, + 0xD3, 0x1B, 0xF6, 0xB5, 0x85, 0xFF, 0xAE, + 0x5B, 0x7A, 0x03, 0x5B, 0xF6, 0xF7, 0x1C, + 0x35, 0xFD, 0xAD, 0x44, 0xCF, 0xD2, 0xD7, + 0x4F, 0x92, 0x08, 0xBE, 0x25, 0x8F, 0xF3, + 0x24, 0x94, 0x33, 0x28, 0xF6, 0x72, 0x2D, + 0x9E, 0xE1, 0x00, 0x3E, 0x5C, 0x50, 0xB1, + 0xDF, 0x82, 0xCC, 0x6D, 0x24, 0x1B, 0x0E, + 0x2A, 0xE9, 0xCD, 0x34, 0x8B, 0x1F, 0xD4, + 0x7E, 0x92, 0x67, 0xAF, 0xC1, 0xB2, 0xAE, + 0x91, 0xEE, 0x51, 0xD6, 0xCB, 0x0E, 0x31, + 0x79, 0xAB, 0x10, 0x42, 0xA9, 0x5D, 0xCF, + 0x6A, 0x94, 0x83, 0xB8, 0x4B, 0x4B, 0x36, + 0xB3, 0x86, 0x1A, 0xA7, 0x25, 0x5E, 0x4C, + 0x02, 0x78, 0xBA, 0x36, 0x04, 0x65, 0x0C, + 0x10, 0xBE, 0x19, 0x48, 0x2F, 0x23, 0x17, + 0x1B, 0x67, 0x1D, 0xF1, 0xCF, 0x3B, 0x96, + 0x0C, 0x07, 0x43, 0x01, 0xCD, 0x93, 0xC1, + 0xD1, 0x76, 0x03, 0xD1, 0x47, 0xDA, 0xE2, + 0xAE, 0xF8, 0x37, 0xA6, 0x29, 0x64, 0xEF, + 0x15, 0xE5, 0xFB, 0x4A, 0xAC, 0x0B, 0x8C, + 0x1C, 0xCA, 0xA4, 0xBE, 0x75, 0x4A, 0xB5, + 0x72, 0x8A, 0xE9, 0x13, 0x0C, 0x4C, 0x7D, + 0x02, 0x88, 0x0A, 0xB9, 0x47, 0x2D, 0x45, + 0x55, 0x62, 0x16, 0xD6, 0x99, 0x8B, 0x86, + 0x82, 0x28, 0x3D, 0x19, 0xD4, 0x2A, 0x90, + 0xD5, 0xEF, 0x8E, 0x5D, 0x32, 0x76, 0x7D, + 0xC2, 0x82, 0x2C, 0x6D, 0xF7, 0x85, 0x45, + 0x75, 0x38, 0xAB, 0xAE, 0x83, 0x06, 0x3E, + 0xD9, 0xCB, 0x87, 0xC2, 0xD3, 0x70, 0xF2, + 0x63, 0xD5, 0xFA, 0xD7, 0x46, 0x6D, 0x84, + 0x99, 0xEB, 0x8F, 0x46, 0x4A, 0x70, 0x25, + 0x12, 0xB0, 0xCE, 0xE7, 0x71, 0xE9, 0x13, + 0x0D, 0x69, 0x77, 0x35, 0xF8, 0x97, 0xFD, + 0x03, 0x6C, 0xC5, 0x04, 0x32, 0x6C, 0x3B, + 0x01, 0x39, 0x9F, 0x64, 0x35, 0x32, 0x29, + 0x0F, 0x95, 0x8C, 0x0B, 0xBD, 0x90, 0x06, + 0x5D, 0xF0, 0x8B, 0xAB, 0xBD, 0x30, 0xAE, + 0xB6, 0x3B, 0x84, 0xC4, 0x60, 0x5D, 0x6C, + 0xA3, 0x71, 0x04, 0x71, 0x27, 0xD0, 0x3A, + 0x72, 0xD5, 0x98, 0xA1, 0xED, 0xAD, 0xFE, + 0x70, 0x7E, 0x88, 0x47, 0x25, 0xC1, 0x68, + 0x90, 0x54, 0x9D, 0x69, 0x65, 0x7F, 0xFF, + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF +}; + +const gnutls_datum_t gnutls_modp_3072_group_prime = { + (void *) modp_params_3072, sizeof(modp_params_3072) +}; +const gnutls_datum_t gnutls_modp_3072_group_q = { + (void *) modp_q_3072, sizeof(modp_q_3072) +}; +const gnutls_datum_t gnutls_modp_3072_group_generator = { + (void *) &modp_generator, sizeof(modp_generator) +}; +const unsigned int gnutls_modp_3072_key_bits = 276; + +static const unsigned char modp_params_4096[] = { + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, + 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B, 0x80, + 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, + 0x8A, 0x67, 0xCC, 0x74, 0x02, 0x0B, 0xBE, + 0xA6, 0x3B, 0x13, 0x9B, 0x22, 0x51, 0x4A, + 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, + 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, + 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, + 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, + 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, + 0x5E, 0x7E, 0xC6, 0xF4, 0x4C, 0x42, 0xE9, + 0xA6, 0x37, 0xED, 0x6B, 0x0B, 0xFF, 0x5C, + 0xB6, 0xF4, 0x06, 0xB7, 0xED, 0xEE, 0x38, + 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, 0xAE, + 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, + 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, + 0x3D, 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, + 0xBF, 0x05, 0x98, 0xDA, 0x48, 0x36, 0x1C, + 0x55, 0xD3, 0x9A, 0x69, 0x16, 0x3F, 0xA8, + 0xFD, 0x24, 0xCF, 0x5F, 0x83, 0x65, 0x5D, + 0x23, 0xDC, 0xA3, 0xAD, 0x96, 0x1C, 0x62, + 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, 0x9E, + 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, + 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, + 0x04, 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, + 0x21, 0x7C, 0x32, 0x90, 0x5E, 0x46, 0x2E, + 0x36, 0xCE, 0x3B, 0xE3, 0x9E, 0x77, 0x2C, + 0x18, 0x0E, 0x86, 0x03, 0x9B, 0x27, 0x83, + 0xA2, 0xEC, 0x07, 0xA2, 0x8F, 0xB5, 0xC5, + 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, 0xDE, + 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, + 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, + 0xE5, 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, + 0x05, 0x10, 0x15, 0x72, 0x8E, 0x5A, 0x8A, + 0xAA, 0xC4, 0x2D, 0xAD, 0x33, 0x17, 0x0D, + 0x04, 0x50, 0x7A, 0x33, 0xA8, 0x55, 0x21, + 0xAB, 0xDF, 0x1C, 0xBA, 0x64, 0xEC, 0xFB, + 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, 0x8A, + 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, + 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, + 0xC7, 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, + 0x33, 0xD7, 0x1E, 0x8C, 0x94, 0xE0, 0x4A, + 0x25, 0x61, 0x9D, 0xCE, 0xE3, 0xD2, 0x26, + 0x1A, 0xD2, 0xEE, 0x6B, 0xF1, 0x2F, 0xFA, + 0x06, 0xD9, 0x8A, 0x08, 0x64, 0xD8, 0x76, + 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, 0x52, + 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, + 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, + 0x6C, 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, + 0x46, 0xE2, 0x08, 0xE2, 0x4F, 0xA0, 0x74, + 0xE5, 0xAB, 0x31, 0x43, 0xDB, 0x5B, 0xFC, + 0xE0, 0xFD, 0x10, 0x8E, 0x4B, 0x82, 0xD1, + 0x20, 0xA9, 0x21, 0x08, 0x01, 0x1A, 0x72, + 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, 0x88, + 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, + 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, + 0x3C, 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, + 0x0B, 0xDA, 0x25, 0x83, 0xE9, 0xCA, 0x2A, + 0xD4, 0x4C, 0xE8, 0xDB, 0xBB, 0xC2, 0xDB, + 0x04, 0xDE, 0x8E, 0xF9, 0x2E, 0x8E, 0xFC, + 0x14, 0x1F, 0xBE, 0xCA, 0xA6, 0x28, 0x7C, + 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, 0x99, + 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, + 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, + 0xED, 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, + 0xD7, 0xAF, 0xB8, 0x1B, 0xDD, 0x76, 0x21, + 0x70, 0x48, 0x1C, 0xD0, 0x06, 0x91, 0x27, + 0xD5, 0xB0, 0x5A, 0xA9, 0x93, 0xB4, 0xEA, + 0x98, 0x8D, 0x8F, 0xDD, 0xC1, 0x86, 0xFF, + 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, 0x4D, + 0xF4, 0x35, 0xC9, 0x34, 0x06, 0x31, 0x99, + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF +}; + +static const unsigned char modp_q_4096[] = { + 0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xE4, 0x87, 0xED, 0x51, 0x10, 0xB4, + 0x61, 0x1A, 0x62, 0x63, 0x31, 0x45, 0xC0, + 0x6E, 0x0E, 0x68, 0x94, 0x81, 0x27, 0x04, + 0x45, 0x33, 0xE6, 0x3A, 0x01, 0x05, 0xDF, + 0x53, 0x1D, 0x89, 0xCD, 0x91, 0x28, 0xA5, + 0x04, 0x3C, 0xC7, 0x1A, 0x02, 0x6E, 0xF7, + 0xCA, 0x8C, 0xD9, 0xE6, 0x9D, 0x21, 0x8D, + 0x98, 0x15, 0x85, 0x36, 0xF9, 0x2F, 0x8A, + 0x1B, 0xA7, 0xF0, 0x9A, 0xB6, 0xB6, 0xA8, + 0xE1, 0x22, 0xF2, 0x42, 0xDA, 0xBB, 0x31, + 0x2F, 0x3F, 0x63, 0x7A, 0x26, 0x21, 0x74, + 0xD3, 0x1B, 0xF6, 0xB5, 0x85, 0xFF, 0xAE, + 0x5B, 0x7A, 0x03, 0x5B, 0xF6, 0xF7, 0x1C, + 0x35, 0xFD, 0xAD, 0x44, 0xCF, 0xD2, 0xD7, + 0x4F, 0x92, 0x08, 0xBE, 0x25, 0x8F, 0xF3, + 0x24, 0x94, 0x33, 0x28, 0xF6, 0x72, 0x2D, + 0x9E, 0xE1, 0x00, 0x3E, 0x5C, 0x50, 0xB1, + 0xDF, 0x82, 0xCC, 0x6D, 0x24, 0x1B, 0x0E, + 0x2A, 0xE9, 0xCD, 0x34, 0x8B, 0x1F, 0xD4, + 0x7E, 0x92, 0x67, 0xAF, 0xC1, 0xB2, 0xAE, + 0x91, 0xEE, 0x51, 0xD6, 0xCB, 0x0E, 0x31, + 0x79, 0xAB, 0x10, 0x42, 0xA9, 0x5D, 0xCF, + 0x6A, 0x94, 0x83, 0xB8, 0x4B, 0x4B, 0x36, + 0xB3, 0x86, 0x1A, 0xA7, 0x25, 0x5E, 0x4C, + 0x02, 0x78, 0xBA, 0x36, 0x04, 0x65, 0x0C, + 0x10, 0xBE, 0x19, 0x48, 0x2F, 0x23, 0x17, + 0x1B, 0x67, 0x1D, 0xF1, 0xCF, 0x3B, 0x96, + 0x0C, 0x07, 0x43, 0x01, 0xCD, 0x93, 0xC1, + 0xD1, 0x76, 0x03, 0xD1, 0x47, 0xDA, 0xE2, + 0xAE, 0xF8, 0x37, 0xA6, 0x29, 0x64, 0xEF, + 0x15, 0xE5, 0xFB, 0x4A, 0xAC, 0x0B, 0x8C, + 0x1C, 0xCA, 0xA4, 0xBE, 0x75, 0x4A, 0xB5, + 0x72, 0x8A, 0xE9, 0x13, 0x0C, 0x4C, 0x7D, + 0x02, 0x88, 0x0A, 0xB9, 0x47, 0x2D, 0x45, + 0x55, 0x62, 0x16, 0xD6, 0x99, 0x8B, 0x86, + 0x82, 0x28, 0x3D, 0x19, 0xD4, 0x2A, 0x90, + 0xD5, 0xEF, 0x8E, 0x5D, 0x32, 0x76, 0x7D, + 0xC2, 0x82, 0x2C, 0x6D, 0xF7, 0x85, 0x45, + 0x75, 0x38, 0xAB, 0xAE, 0x83, 0x06, 0x3E, + 0xD9, 0xCB, 0x87, 0xC2, 0xD3, 0x70, 0xF2, + 0x63, 0xD5, 0xFA, 0xD7, 0x46, 0x6D, 0x84, + 0x99, 0xEB, 0x8F, 0x46, 0x4A, 0x70, 0x25, + 0x12, 0xB0, 0xCE, 0xE7, 0x71, 0xE9, 0x13, + 0x0D, 0x69, 0x77, 0x35, 0xF8, 0x97, 0xFD, + 0x03, 0x6C, 0xC5, 0x04, 0x32, 0x6C, 0x3B, + 0x01, 0x39, 0x9F, 0x64, 0x35, 0x32, 0x29, + 0x0F, 0x95, 0x8C, 0x0B, 0xBD, 0x90, 0x06, + 0x5D, 0xF0, 0x8B, 0xAB, 0xBD, 0x30, 0xAE, + 0xB6, 0x3B, 0x84, 0xC4, 0x60, 0x5D, 0x6C, + 0xA3, 0x71, 0x04, 0x71, 0x27, 0xD0, 0x3A, + 0x72, 0xD5, 0x98, 0xA1, 0xED, 0xAD, 0xFE, + 0x70, 0x7E, 0x88, 0x47, 0x25, 0xC1, 0x68, + 0x90, 0x54, 0x90, 0x84, 0x00, 0x8D, 0x39, + 0x1E, 0x09, 0x53, 0xC3, 0xF3, 0x6B, 0xC4, + 0x38, 0xCD, 0x08, 0x5E, 0xDD, 0x2D, 0x93, + 0x4C, 0xE1, 0x93, 0x8C, 0x35, 0x7A, 0x71, + 0x1E, 0x0D, 0x4A, 0x34, 0x1A, 0x5B, 0x0A, + 0x85, 0xED, 0x12, 0xC1, 0xF4, 0xE5, 0x15, + 0x6A, 0x26, 0x74, 0x6D, 0xDD, 0xE1, 0x6D, + 0x82, 0x6F, 0x47, 0x7C, 0x97, 0x47, 0x7E, + 0x0A, 0x0F, 0xDF, 0x65, 0x53, 0x14, 0x3E, + 0x2C, 0xA3, 0xA7, 0x35, 0xE0, 0x2E, 0xCC, + 0xD9, 0x4B, 0x27, 0xD0, 0x48, 0x61, 0xD1, + 0x11, 0x9D, 0xD0, 0xC3, 0x28, 0xAD, 0xF3, + 0xF6, 0x8F, 0xB0, 0x94, 0xB8, 0x67, 0x71, + 0x6B, 0xD7, 0xDC, 0x0D, 0xEE, 0xBB, 0x10, + 0xB8, 0x24, 0x0E, 0x68, 0x03, 0x48, 0x93, + 0xEA, 0xD8, 0x2D, 0x54, 0xC9, 0xDA, 0x75, + 0x4C, 0x46, 0xC7, 0xEE, 0xE0, 0xC3, 0x7F, + 0xDB, 0xEE, 0x48, 0x53, 0x60, 0x47, 0xA6, + 0xFA, 0x1A, 0xE4, 0x9A, 0x03, 0x18, 0xCC, + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF +}; + +const gnutls_datum_t gnutls_modp_4096_group_prime = { + (void *) modp_params_4096, sizeof(modp_params_4096) +}; +const gnutls_datum_t gnutls_modp_4096_group_q = { + (void *) modp_q_4096, sizeof(modp_q_4096) +}; +const gnutls_datum_t gnutls_modp_4096_group_generator = { + (void *) &modp_generator, sizeof(modp_generator) +}; +const unsigned int gnutls_modp_4096_key_bits = 336; + +static const unsigned char modp_params_6144[] = { + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, + 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B, 0x80, + 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, + 0x8A, 0x67, 0xCC, 0x74, 0x02, 0x0B, 0xBE, + 0xA6, 0x3B, 0x13, 0x9B, 0x22, 0x51, 0x4A, + 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, + 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, + 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, + 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, + 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, + 0x5E, 0x7E, 0xC6, 0xF4, 0x4C, 0x42, 0xE9, + 0xA6, 0x37, 0xED, 0x6B, 0x0B, 0xFF, 0x5C, + 0xB6, 0xF4, 0x06, 0xB7, 0xED, 0xEE, 0x38, + 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, 0xAE, + 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, + 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, + 0x3D, 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, + 0xBF, 0x05, 0x98, 0xDA, 0x48, 0x36, 0x1C, + 0x55, 0xD3, 0x9A, 0x69, 0x16, 0x3F, 0xA8, + 0xFD, 0x24, 0xCF, 0x5F, 0x83, 0x65, 0x5D, + 0x23, 0xDC, 0xA3, 0xAD, 0x96, 0x1C, 0x62, + 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, 0x9E, + 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, + 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, + 0x04, 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, + 0x21, 0x7C, 0x32, 0x90, 0x5E, 0x46, 0x2E, + 0x36, 0xCE, 0x3B, 0xE3, 0x9E, 0x77, 0x2C, + 0x18, 0x0E, 0x86, 0x03, 0x9B, 0x27, 0x83, + 0xA2, 0xEC, 0x07, 0xA2, 0x8F, 0xB5, 0xC5, + 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, 0xDE, + 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, + 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, + 0xE5, 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, + 0x05, 0x10, 0x15, 0x72, 0x8E, 0x5A, 0x8A, + 0xAA, 0xC4, 0x2D, 0xAD, 0x33, 0x17, 0x0D, + 0x04, 0x50, 0x7A, 0x33, 0xA8, 0x55, 0x21, + 0xAB, 0xDF, 0x1C, 0xBA, 0x64, 0xEC, 0xFB, + 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, 0x8A, + 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, + 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, + 0xC7, 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, + 0x33, 0xD7, 0x1E, 0x8C, 0x94, 0xE0, 0x4A, + 0x25, 0x61, 0x9D, 0xCE, 0xE3, 0xD2, 0x26, + 0x1A, 0xD2, 0xEE, 0x6B, 0xF1, 0x2F, 0xFA, + 0x06, 0xD9, 0x8A, 0x08, 0x64, 0xD8, 0x76, + 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, 0x52, + 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, + 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, + 0x6C, 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, + 0x46, 0xE2, 0x08, 0xE2, 0x4F, 0xA0, 0x74, + 0xE5, 0xAB, 0x31, 0x43, 0xDB, 0x5B, 0xFC, + 0xE0, 0xFD, 0x10, 0x8E, 0x4B, 0x82, 0xD1, + 0x20, 0xA9, 0x21, 0x08, 0x01, 0x1A, 0x72, + 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, 0x88, + 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, + 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, + 0x3C, 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, + 0x0B, 0xDA, 0x25, 0x83, 0xE9, 0xCA, 0x2A, + 0xD4, 0x4C, 0xE8, 0xDB, 0xBB, 0xC2, 0xDB, + 0x04, 0xDE, 0x8E, 0xF9, 0x2E, 0x8E, 0xFC, + 0x14, 0x1F, 0xBE, 0xCA, 0xA6, 0x28, 0x7C, + 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, 0x99, + 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, + 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, + 0xED, 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, + 0xD7, 0xAF, 0xB8, 0x1B, 0xDD, 0x76, 0x21, + 0x70, 0x48, 0x1C, 0xD0, 0x06, 0x91, 0x27, + 0xD5, 0xB0, 0x5A, 0xA9, 0x93, 0xB4, 0xEA, + 0x98, 0x8D, 0x8F, 0xDD, 0xC1, 0x86, 0xFF, + 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, 0x4D, + 0xF4, 0x35, 0xC9, 0x34, 0x02, 0x84, 0x92, + 0x36, 0xC3, 0xFA, 0xB4, 0xD2, 0x7C, 0x70, + 0x26, 0xC1, 0xD4, 0xDC, 0xB2, 0x60, 0x26, + 0x46, 0xDE, 0xC9, 0x75, 0x1E, 0x76, 0x3D, + 0xBA, 0x37, 0xBD, 0xF8, 0xFF, 0x94, 0x06, + 0xAD, 0x9E, 0x53, 0x0E, 0xE5, 0xDB, 0x38, + 0x2F, 0x41, 0x30, 0x01, 0xAE, 0xB0, 0x6A, + 0x53, 0xED, 0x90, 0x27, 0xD8, 0x31, 0x17, + 0x97, 0x27, 0xB0, 0x86, 0x5A, 0x89, 0x18, + 0xDA, 0x3E, 0xDB, 0xEB, 0xCF, 0x9B, 0x14, + 0xED, 0x44, 0xCE, 0x6C, 0xBA, 0xCE, 0xD4, + 0xBB, 0x1B, 0xDB, 0x7F, 0x14, 0x47, 0xE6, + 0xCC, 0x25, 0x4B, 0x33, 0x20, 0x51, 0x51, + 0x2B, 0xD7, 0xAF, 0x42, 0x6F, 0xB8, 0xF4, + 0x01, 0x37, 0x8C, 0xD2, 0xBF, 0x59, 0x83, + 0xCA, 0x01, 0xC6, 0x4B, 0x92, 0xEC, 0xF0, + 0x32, 0xEA, 0x15, 0xD1, 0x72, 0x1D, 0x03, + 0xF4, 0x82, 0xD7, 0xCE, 0x6E, 0x74, 0xFE, + 0xF6, 0xD5, 0x5E, 0x70, 0x2F, 0x46, 0x98, + 0x0C, 0x82, 0xB5, 0xA8, 0x40, 0x31, 0x90, + 0x0B, 0x1C, 0x9E, 0x59, 0xE7, 0xC9, 0x7F, + 0xBE, 0xC7, 0xE8, 0xF3, 0x23, 0xA9, 0x7A, + 0x7E, 0x36, 0xCC, 0x88, 0xBE, 0x0F, 0x1D, + 0x45, 0xB7, 0xFF, 0x58, 0x5A, 0xC5, 0x4B, + 0xD4, 0x07, 0xB2, 0x2B, 0x41, 0x54, 0xAA, + 0xCC, 0x8F, 0x6D, 0x7E, 0xBF, 0x48, 0xE1, + 0xD8, 0x14, 0xCC, 0x5E, 0xD2, 0x0F, 0x80, + 0x37, 0xE0, 0xA7, 0x97, 0x15, 0xEE, 0xF2, + 0x9B, 0xE3, 0x28, 0x06, 0xA1, 0xD5, 0x8B, + 0xB7, 0xC5, 0xDA, 0x76, 0xF5, 0x50, 0xAA, + 0x3D, 0x8A, 0x1F, 0xBF, 0xF0, 0xEB, 0x19, + 0xCC, 0xB1, 0xA3, 0x13, 0xD5, 0x5C, 0xDA, + 0x56, 0xC9, 0xEC, 0x2E, 0xF2, 0x96, 0x32, + 0x38, 0x7F, 0xE8, 0xD7, 0x6E, 0x3C, 0x04, + 0x68, 0x04, 0x3E, 0x8F, 0x66, 0x3F, 0x48, + 0x60, 0xEE, 0x12, 0xBF, 0x2D, 0x5B, 0x0B, + 0x74, 0x74, 0xD6, 0xE6, 0x94, 0xF9, 0x1E, + 0x6D, 0xCC, 0x40, 0x24, 0xFF, 0xFF, 0xFF, + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF +}; + +static const unsigned char modp_q_6144[] = { + 0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xE4, 0x87, 0xED, 0x51, 0x10, 0xB4, + 0x61, 0x1A, 0x62, 0x63, 0x31, 0x45, 0xC0, + 0x6E, 0x0E, 0x68, 0x94, 0x81, 0x27, 0x04, + 0x45, 0x33, 0xE6, 0x3A, 0x01, 0x05, 0xDF, + 0x53, 0x1D, 0x89, 0xCD, 0x91, 0x28, 0xA5, + 0x04, 0x3C, 0xC7, 0x1A, 0x02, 0x6E, 0xF7, + 0xCA, 0x8C, 0xD9, 0xE6, 0x9D, 0x21, 0x8D, + 0x98, 0x15, 0x85, 0x36, 0xF9, 0x2F, 0x8A, + 0x1B, 0xA7, 0xF0, 0x9A, 0xB6, 0xB6, 0xA8, + 0xE1, 0x22, 0xF2, 0x42, 0xDA, 0xBB, 0x31, + 0x2F, 0x3F, 0x63, 0x7A, 0x26, 0x21, 0x74, + 0xD3, 0x1B, 0xF6, 0xB5, 0x85, 0xFF, 0xAE, + 0x5B, 0x7A, 0x03, 0x5B, 0xF6, 0xF7, 0x1C, + 0x35, 0xFD, 0xAD, 0x44, 0xCF, 0xD2, 0xD7, + 0x4F, 0x92, 0x08, 0xBE, 0x25, 0x8F, 0xF3, + 0x24, 0x94, 0x33, 0x28, 0xF6, 0x72, 0x2D, + 0x9E, 0xE1, 0x00, 0x3E, 0x5C, 0x50, 0xB1, + 0xDF, 0x82, 0xCC, 0x6D, 0x24, 0x1B, 0x0E, + 0x2A, 0xE9, 0xCD, 0x34, 0x8B, 0x1F, 0xD4, + 0x7E, 0x92, 0x67, 0xAF, 0xC1, 0xB2, 0xAE, + 0x91, 0xEE, 0x51, 0xD6, 0xCB, 0x0E, 0x31, + 0x79, 0xAB, 0x10, 0x42, 0xA9, 0x5D, 0xCF, + 0x6A, 0x94, 0x83, 0xB8, 0x4B, 0x4B, 0x36, + 0xB3, 0x86, 0x1A, 0xA7, 0x25, 0x5E, 0x4C, + 0x02, 0x78, 0xBA, 0x36, 0x04, 0x65, 0x0C, + 0x10, 0xBE, 0x19, 0x48, 0x2F, 0x23, 0x17, + 0x1B, 0x67, 0x1D, 0xF1, 0xCF, 0x3B, 0x96, + 0x0C, 0x07, 0x43, 0x01, 0xCD, 0x93, 0xC1, + 0xD1, 0x76, 0x03, 0xD1, 0x47, 0xDA, 0xE2, + 0xAE, 0xF8, 0x37, 0xA6, 0x29, 0x64, 0xEF, + 0x15, 0xE5, 0xFB, 0x4A, 0xAC, 0x0B, 0x8C, + 0x1C, 0xCA, 0xA4, 0xBE, 0x75, 0x4A, 0xB5, + 0x72, 0x8A, 0xE9, 0x13, 0x0C, 0x4C, 0x7D, + 0x02, 0x88, 0x0A, 0xB9, 0x47, 0x2D, 0x45, + 0x55, 0x62, 0x16, 0xD6, 0x99, 0x8B, 0x86, + 0x82, 0x28, 0x3D, 0x19, 0xD4, 0x2A, 0x90, + 0xD5, 0xEF, 0x8E, 0x5D, 0x32, 0x76, 0x7D, + 0xC2, 0x82, 0x2C, 0x6D, 0xF7, 0x85, 0x45, + 0x75, 0x38, 0xAB, 0xAE, 0x83, 0x06, 0x3E, + 0xD9, 0xCB, 0x87, 0xC2, 0xD3, 0x70, 0xF2, + 0x63, 0xD5, 0xFA, 0xD7, 0x46, 0x6D, 0x84, + 0x99, 0xEB, 0x8F, 0x46, 0x4A, 0x70, 0x25, + 0x12, 0xB0, 0xCE, 0xE7, 0x71, 0xE9, 0x13, + 0x0D, 0x69, 0x77, 0x35, 0xF8, 0x97, 0xFD, + 0x03, 0x6C, 0xC5, 0x04, 0x32, 0x6C, 0x3B, + 0x01, 0x39, 0x9F, 0x64, 0x35, 0x32, 0x29, + 0x0F, 0x95, 0x8C, 0x0B, 0xBD, 0x90, 0x06, + 0x5D, 0xF0, 0x8B, 0xAB, 0xBD, 0x30, 0xAE, + 0xB6, 0x3B, 0x84, 0xC4, 0x60, 0x5D, 0x6C, + 0xA3, 0x71, 0x04, 0x71, 0x27, 0xD0, 0x3A, + 0x72, 0xD5, 0x98, 0xA1, 0xED, 0xAD, 0xFE, + 0x70, 0x7E, 0x88, 0x47, 0x25, 0xC1, 0x68, + 0x90, 0x54, 0x90, 0x84, 0x00, 0x8D, 0x39, + 0x1E, 0x09, 0x53, 0xC3, 0xF3, 0x6B, 0xC4, + 0x38, 0xCD, 0x08, 0x5E, 0xDD, 0x2D, 0x93, + 0x4C, 0xE1, 0x93, 0x8C, 0x35, 0x7A, 0x71, + 0x1E, 0x0D, 0x4A, 0x34, 0x1A, 0x5B, 0x0A, + 0x85, 0xED, 0x12, 0xC1, 0xF4, 0xE5, 0x15, + 0x6A, 0x26, 0x74, 0x6D, 0xDD, 0xE1, 0x6D, + 0x82, 0x6F, 0x47, 0x7C, 0x97, 0x47, 0x7E, + 0x0A, 0x0F, 0xDF, 0x65, 0x53, 0x14, 0x3E, + 0x2C, 0xA3, 0xA7, 0x35, 0xE0, 0x2E, 0xCC, + 0xD9, 0x4B, 0x27, 0xD0, 0x48, 0x61, 0xD1, + 0x11, 0x9D, 0xD0, 0xC3, 0x28, 0xAD, 0xF3, + 0xF6, 0x8F, 0xB0, 0x94, 0xB8, 0x67, 0x71, + 0x6B, 0xD7, 0xDC, 0x0D, 0xEE, 0xBB, 0x10, + 0xB8, 0x24, 0x0E, 0x68, 0x03, 0x48, 0x93, + 0xEA, 0xD8, 0x2D, 0x54, 0xC9, 0xDA, 0x75, + 0x4C, 0x46, 0xC7, 0xEE, 0xE0, 0xC3, 0x7F, + 0xDB, 0xEE, 0x48, 0x53, 0x60, 0x47, 0xA6, + 0xFA, 0x1A, 0xE4, 0x9A, 0x01, 0x42, 0x49, + 0x1B, 0x61, 0xFD, 0x5A, 0x69, 0x3E, 0x38, + 0x13, 0x60, 0xEA, 0x6E, 0x59, 0x30, 0x13, + 0x23, 0x6F, 0x64, 0xBA, 0x8F, 0x3B, 0x1E, + 0xDD, 0x1B, 0xDE, 0xFC, 0x7F, 0xCA, 0x03, + 0x56, 0xCF, 0x29, 0x87, 0x72, 0xED, 0x9C, + 0x17, 0xA0, 0x98, 0x00, 0xD7, 0x58, 0x35, + 0x29, 0xF6, 0xC8, 0x13, 0xEC, 0x18, 0x8B, + 0xCB, 0x93, 0xD8, 0x43, 0x2D, 0x44, 0x8C, + 0x6D, 0x1F, 0x6D, 0xF5, 0xE7, 0xCD, 0x8A, + 0x76, 0xA2, 0x67, 0x36, 0x5D, 0x67, 0x6A, + 0x5D, 0x8D, 0xED, 0xBF, 0x8A, 0x23, 0xF3, + 0x66, 0x12, 0xA5, 0x99, 0x90, 0x28, 0xA8, + 0x95, 0xEB, 0xD7, 0xA1, 0x37, 0xDC, 0x7A, + 0x00, 0x9B, 0xC6, 0x69, 0x5F, 0xAC, 0xC1, + 0xE5, 0x00, 0xE3, 0x25, 0xC9, 0x76, 0x78, + 0x19, 0x75, 0x0A, 0xE8, 0xB9, 0x0E, 0x81, + 0xFA, 0x41, 0x6B, 0xE7, 0x37, 0x3A, 0x7F, + 0x7B, 0x6A, 0xAF, 0x38, 0x17, 0xA3, 0x4C, + 0x06, 0x41, 0x5A, 0xD4, 0x20, 0x18, 0xC8, + 0x05, 0x8E, 0x4F, 0x2C, 0xF3, 0xE4, 0xBF, + 0xDF, 0x63, 0xF4, 0x79, 0x91, 0xD4, 0xBD, + 0x3F, 0x1B, 0x66, 0x44, 0x5F, 0x07, 0x8E, + 0xA2, 0xDB, 0xFF, 0xAC, 0x2D, 0x62, 0xA5, + 0xEA, 0x03, 0xD9, 0x15, 0xA0, 0xAA, 0x55, + 0x66, 0x47, 0xB6, 0xBF, 0x5F, 0xA4, 0x70, + 0xEC, 0x0A, 0x66, 0x2F, 0x69, 0x07, 0xC0, + 0x1B, 0xF0, 0x53, 0xCB, 0x8A, 0xF7, 0x79, + 0x4D, 0xF1, 0x94, 0x03, 0x50, 0xEA, 0xC5, + 0xDB, 0xE2, 0xED, 0x3B, 0x7A, 0xA8, 0x55, + 0x1E, 0xC5, 0x0F, 0xDF, 0xF8, 0x75, 0x8C, + 0xE6, 0x58, 0xD1, 0x89, 0xEA, 0xAE, 0x6D, + 0x2B, 0x64, 0xF6, 0x17, 0x79, 0x4B, 0x19, + 0x1C, 0x3F, 0xF4, 0x6B, 0xB7, 0x1E, 0x02, + 0x34, 0x02, 0x1F, 0x47, 0xB3, 0x1F, 0xA4, + 0x30, 0x77, 0x09, 0x5F, 0x96, 0xAD, 0x85, + 0xBA, 0x3A, 0x6B, 0x73, 0x4A, 0x7C, 0x8F, + 0x36, 0xE6, 0x20, 0x12, 0x7F, 0xFF, 0xFF, + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF +}; + +const gnutls_datum_t gnutls_modp_6144_group_prime = { + (void *) modp_params_6144, sizeof(modp_params_6144) +}; +const gnutls_datum_t gnutls_modp_6144_group_q = { + (void *) modp_q_6144, sizeof(modp_q_6144) +}; +const gnutls_datum_t gnutls_modp_6144_group_generator = { + (void *) &modp_generator, sizeof(modp_generator) +}; +const unsigned int gnutls_modp_6144_key_bits = 376; + +static const unsigned char modp_params_8192[] = { + 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, + 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B, 0x80, + 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, + 0x8A, 0x67, 0xCC, 0x74, 0x02, 0x0B, 0xBE, + 0xA6, 0x3B, 0x13, 0x9B, 0x22, 0x51, 0x4A, + 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, + 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, + 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, + 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, + 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, + 0x5E, 0x7E, 0xC6, 0xF4, 0x4C, 0x42, 0xE9, + 0xA6, 0x37, 0xED, 0x6B, 0x0B, 0xFF, 0x5C, + 0xB6, 0xF4, 0x06, 0xB7, 0xED, 0xEE, 0x38, + 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5, 0xAE, + 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6, + 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE4, 0x5B, + 0x3D, 0xC2, 0x00, 0x7C, 0xB8, 0xA1, 0x63, + 0xBF, 0x05, 0x98, 0xDA, 0x48, 0x36, 0x1C, + 0x55, 0xD3, 0x9A, 0x69, 0x16, 0x3F, 0xA8, + 0xFD, 0x24, 0xCF, 0x5F, 0x83, 0x65, 0x5D, + 0x23, 0xDC, 0xA3, 0xAD, 0x96, 0x1C, 0x62, + 0xF3, 0x56, 0x20, 0x85, 0x52, 0xBB, 0x9E, + 0xD5, 0x29, 0x07, 0x70, 0x96, 0x96, 0x6D, + 0x67, 0x0C, 0x35, 0x4E, 0x4A, 0xBC, 0x98, + 0x04, 0xF1, 0x74, 0x6C, 0x08, 0xCA, 0x18, + 0x21, 0x7C, 0x32, 0x90, 0x5E, 0x46, 0x2E, + 0x36, 0xCE, 0x3B, 0xE3, 0x9E, 0x77, 0x2C, + 0x18, 0x0E, 0x86, 0x03, 0x9B, 0x27, 0x83, + 0xA2, 0xEC, 0x07, 0xA2, 0x8F, 0xB5, 0xC5, + 0x5D, 0xF0, 0x6F, 0x4C, 0x52, 0xC9, 0xDE, + 0x2B, 0xCB, 0xF6, 0x95, 0x58, 0x17, 0x18, + 0x39, 0x95, 0x49, 0x7C, 0xEA, 0x95, 0x6A, + 0xE5, 0x15, 0xD2, 0x26, 0x18, 0x98, 0xFA, + 0x05, 0x10, 0x15, 0x72, 0x8E, 0x5A, 0x8A, + 0xAA, 0xC4, 0x2D, 0xAD, 0x33, 0x17, 0x0D, + 0x04, 0x50, 0x7A, 0x33, 0xA8, 0x55, 0x21, + 0xAB, 0xDF, 0x1C, 0xBA, 0x64, 0xEC, 0xFB, + 0x85, 0x04, 0x58, 0xDB, 0xEF, 0x0A, 0x8A, + 0xEA, 0x71, 0x57, 0x5D, 0x06, 0x0C, 0x7D, + 0xB3, 0x97, 0x0F, 0x85, 0xA6, 0xE1, 0xE4, + 0xC7, 0xAB, 0xF5, 0xAE, 0x8C, 0xDB, 0x09, + 0x33, 0xD7, 0x1E, 0x8C, 0x94, 0xE0, 0x4A, + 0x25, 0x61, 0x9D, 0xCE, 0xE3, 0xD2, 0x26, + 0x1A, 0xD2, 0xEE, 0x6B, 0xF1, 0x2F, 0xFA, + 0x06, 0xD9, 0x8A, 0x08, 0x64, 0xD8, 0x76, + 0x02, 0x73, 0x3E, 0xC8, 0x6A, 0x64, 0x52, + 0x1F, 0x2B, 0x18, 0x17, 0x7B, 0x20, 0x0C, + 0xBB, 0xE1, 0x17, 0x57, 0x7A, 0x61, 0x5D, + 0x6C, 0x77, 0x09, 0x88, 0xC0, 0xBA, 0xD9, + 0x46, 0xE2, 0x08, 0xE2, 0x4F, 0xA0, 0x74, + 0xE5, 0xAB, 0x31, 0x43, 0xDB, 0x5B, 0xFC, + 0xE0, 0xFD, 0x10, 0x8E, 0x4B, 0x82, 0xD1, + 0x20, 0xA9, 0x21, 0x08, 0x01, 0x1A, 0x72, + 0x3C, 0x12, 0xA7, 0x87, 0xE6, 0xD7, 0x88, + 0x71, 0x9A, 0x10, 0xBD, 0xBA, 0x5B, 0x26, + 0x99, 0xC3, 0x27, 0x18, 0x6A, 0xF4, 0xE2, + 0x3C, 0x1A, 0x94, 0x68, 0x34, 0xB6, 0x15, + 0x0B, 0xDA, 0x25, 0x83, 0xE9, 0xCA, 0x2A, + 0xD4, 0x4C, 0xE8, 0xDB, 0xBB, 0xC2, 0xDB, + 0x04, 0xDE, 0x8E, 0xF9, 0x2E, 0x8E, 0xFC, + 0x14, 0x1F, 0xBE, 0xCA, 0xA6, 0x28, 0x7C, + 0x59, 0x47, 0x4E, 0x6B, 0xC0, 0x5D, 0x99, + 0xB2, 0x96, 0x4F, 0xA0, 0x90, 0xC3, 0xA2, + 0x23, 0x3B, 0xA1, 0x86, 0x51, 0x5B, 0xE7, + 0xED, 0x1F, 0x61, 0x29, 0x70, 0xCE, 0xE2, + 0xD7, 0xAF, 0xB8, 0x1B, 0xDD, 0x76, 0x21, + 0x70, 0x48, 0x1C, 0xD0, 0x06, 0x91, 0x27, + 0xD5, 0xB0, 0x5A, 0xA9, 0x93, 0xB4, 0xEA, + 0x98, 0x8D, 0x8F, 0xDD, 0xC1, 0x86, 0xFF, + 0xB7, 0xDC, 0x90, 0xA6, 0xC0, 0x8F, 0x4D, + 0xF4, 0x35, 0xC9, 0x34, 0x02, 0x84, 0x92, + 0x36, 0xC3, 0xFA, 0xB4, 0xD2, 0x7C, 0x70, + 0x26, 0xC1, 0xD4, 0xDC, 0xB2, 0x60, 0x26, + 0x46, 0xDE, 0xC9, 0x75, 0x1E, 0x76, 0x3D, + 0xBA, 0x37, 0xBD, 0xF8, 0xFF, 0x94, 0x06, + 0xAD, 0x9E, 0x53, 0x0E, 0xE5, 0xDB, 0x38, + 0x2F, 0x41, 0x30, 0x01, 0xAE, 0xB0, 0x6A, + 0x53, 0xED, 0x90, 0x27, 0xD8, 0x31, 0x17, + 0x97, 0x27, 0xB0, 0x86, 0x5A, 0x89, 0x18, + 0xDA, 0x3E, 0xDB, 0xEB, 0xCF, 0x9B, 0x14, + 0xED, 0x44, 0xCE, 0x6C, 0xBA, 0xCE, 0xD4, + 0xBB, 0x1B, 0xDB, 0x7F, 0x14, 0x47, 0xE6, + 0xCC, 0x25, 0x4B, 0x33, 0x20, 0x51, 0x51, + 0x2B, 0xD7, 0xAF, 0x42, 0x6F, 0xB8, 0xF4, + 0x01, 0x37, 0x8C, 0xD2, 0xBF, 0x59, 0x83, + 0xCA, 0x01, 0xC6, 0x4B, 0x92, 0xEC, 0xF0, + 0x32, 0xEA, 0x15, 0xD1, 0x72, 0x1D, 0x03, + 0xF4, 0x82, 0xD7, 0xCE, 0x6E, 0x74, 0xFE, + 0xF6, 0xD5, 0x5E, 0x70, 0x2F, 0x46, 0x98, + 0x0C, 0x82, 0xB5, 0xA8, 0x40, 0x31, 0x90, + 0x0B, 0x1C, 0x9E, 0x59, 0xE7, 0xC9, 0x7F, + 0xBE, 0xC7, 0xE8, 0xF3, 0x23, 0xA9, 0x7A, + 0x7E, 0x36, 0xCC, 0x88, 0xBE, 0x0F, 0x1D, + 0x45, 0xB7, 0xFF, 0x58, 0x5A, 0xC5, 0x4B, + 0xD4, 0x07, 0xB2, 0x2B, 0x41, 0x54, 0xAA, + 0xCC, 0x8F, 0x6D, 0x7E, 0xBF, 0x48, 0xE1, + 0xD8, 0x14, 0xCC, 0x5E, 0xD2, 0x0F, 0x80, + 0x37, 0xE0, 0xA7, 0x97, 0x15, 0xEE, 0xF2, + 0x9B, 0xE3, 0x28, 0x06, 0xA1, 0xD5, 0x8B, + 0xB7, 0xC5, 0xDA, 0x76, 0xF5, 0x50, 0xAA, + 0x3D, 0x8A, 0x1F, 0xBF, 0xF0, 0xEB, 0x19, + 0xCC, 0xB1, 0xA3, 0x13, 0xD5, 0x5C, 0xDA, + 0x56, 0xC9, 0xEC, 0x2E, 0xF2, 0x96, 0x32, + 0x38, 0x7F, 0xE8, 0xD7, 0x6E, 0x3C, 0x04, + 0x68, 0x04, 0x3E, 0x8F, 0x66, 0x3F, 0x48, + 0x60, 0xEE, 0x12, 0xBF, 0x2D, 0x5B, 0x0B, + 0x74, 0x74, 0xD6, 0xE6, 0x94, 0xF9, 0x1E, + 0x6D, 0xBE, 0x11, 0x59, 0x74, 0xA3, 0x92, + 0x6F, 0x12, 0xFE, 0xE5, 0xE4, 0x38, 0x77, + 0x7C, 0xB6, 0xA9, 0x32, 0xDF, 0x8C, 0xD8, + 0xBE, 0xC4, 0xD0, 0x73, 0xB9, 0x31, 0xBA, + 0x3B, 0xC8, 0x32, 0xB6, 0x8D, 0x9D, 0xD3, + 0x00, 0x74, 0x1F, 0xA7, 0xBF, 0x8A, 0xFC, + 0x47, 0xED, 0x25, 0x76, 0xF6, 0x93, 0x6B, + 0xA4, 0x24, 0x66, 0x3A, 0xAB, 0x63, 0x9C, + 0x5A, 0xE4, 0xF5, 0x68, 0x34, 0x23, 0xB4, + 0x74, 0x2B, 0xF1, 0xC9, 0x78, 0x23, 0x8F, + 0x16, 0xCB, 0xE3, 0x9D, 0x65, 0x2D, 0xE3, + 0xFD, 0xB8, 0xBE, 0xFC, 0x84, 0x8A, 0xD9, + 0x22, 0x22, 0x2E, 0x04, 0xA4, 0x03, 0x7C, + 0x07, 0x13, 0xEB, 0x57, 0xA8, 0x1A, 0x23, + 0xF0, 0xC7, 0x34, 0x73, 0xFC, 0x64, 0x6C, + 0xEA, 0x30, 0x6B, 0x4B, 0xCB, 0xC8, 0x86, + 0x2F, 0x83, 0x85, 0xDD, 0xFA, 0x9D, 0x4B, + 0x7F, 0xA2, 0xC0, 0x87, 0xE8, 0x79, 0x68, + 0x33, 0x03, 0xED, 0x5B, 0xDD, 0x3A, 0x06, + 0x2B, 0x3C, 0xF5, 0xB3, 0xA2, 0x78, 0xA6, + 0x6D, 0x2A, 0x13, 0xF8, 0x3F, 0x44, 0xF8, + 0x2D, 0xDF, 0x31, 0x0E, 0xE0, 0x74, 0xAB, + 0x6A, 0x36, 0x45, 0x97, 0xE8, 0x99, 0xA0, + 0x25, 0x5D, 0xC1, 0x64, 0xF3, 0x1C, 0xC5, + 0x08, 0x46, 0x85, 0x1D, 0xF9, 0xAB, 0x48, + 0x19, 0x5D, 0xED, 0x7E, 0xA1, 0xB1, 0xD5, + 0x10, 0xBD, 0x7E, 0xE7, 0x4D, 0x73, 0xFA, + 0xF3, 0x6B, 0xC3, 0x1E, 0xCF, 0xA2, 0x68, + 0x35, 0x90, 0x46, 0xF4, 0xEB, 0x87, 0x9F, + 0x92, 0x40, 0x09, 0x43, 0x8B, 0x48, 0x1C, + 0x6C, 0xD7, 0x88, 0x9A, 0x00, 0x2E, 0xD5, + 0xEE, 0x38, 0x2B, 0xC9, 0x19, 0x0D, 0xA6, + 0xFC, 0x02, 0x6E, 0x47, 0x95, 0x58, 0xE4, + 0x47, 0x56, 0x77, 0xE9, 0xAA, 0x9E, 0x30, + 0x50, 0xE2, 0x76, 0x56, 0x94, 0xDF, 0xC8, + 0x1F, 0x56, 0xE8, 0x80, 0xB9, 0x6E, 0x71, + 0x60, 0xC9, 0x80, 0xDD, 0x98, 0xED, 0xD3, + 0xDF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xFF +}; + +static const unsigned char modp_q_8192[] = { + 0x7F, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xE4, 0x87, 0xED, 0x51, 0x10, 0xB4, + 0x61, 0x1A, 0x62, 0x63, 0x31, 0x45, 0xC0, + 0x6E, 0x0E, 0x68, 0x94, 0x81, 0x27, 0x04, + 0x45, 0x33, 0xE6, 0x3A, 0x01, 0x05, 0xDF, + 0x53, 0x1D, 0x89, 0xCD, 0x91, 0x28, 0xA5, + 0x04, 0x3C, 0xC7, 0x1A, 0x02, 0x6E, 0xF7, + 0xCA, 0x8C, 0xD9, 0xE6, 0x9D, 0x21, 0x8D, + 0x98, 0x15, 0x85, 0x36, 0xF9, 0x2F, 0x8A, + 0x1B, 0xA7, 0xF0, 0x9A, 0xB6, 0xB6, 0xA8, + 0xE1, 0x22, 0xF2, 0x42, 0xDA, 0xBB, 0x31, + 0x2F, 0x3F, 0x63, 0x7A, 0x26, 0x21, 0x74, + 0xD3, 0x1B, 0xF6, 0xB5, 0x85, 0xFF, 0xAE, + 0x5B, 0x7A, 0x03, 0x5B, 0xF6, 0xF7, 0x1C, + 0x35, 0xFD, 0xAD, 0x44, 0xCF, 0xD2, 0xD7, + 0x4F, 0x92, 0x08, 0xBE, 0x25, 0x8F, 0xF3, + 0x24, 0x94, 0x33, 0x28, 0xF6, 0x72, 0x2D, + 0x9E, 0xE1, 0x00, 0x3E, 0x5C, 0x50, 0xB1, + 0xDF, 0x82, 0xCC, 0x6D, 0x24, 0x1B, 0x0E, + 0x2A, 0xE9, 0xCD, 0x34, 0x8B, 0x1F, 0xD4, + 0x7E, 0x92, 0x67, 0xAF, 0xC1, 0xB2, 0xAE, + 0x91, 0xEE, 0x51, 0xD6, 0xCB, 0x0E, 0x31, + 0x79, 0xAB, 0x10, 0x42, 0xA9, 0x5D, 0xCF, + 0x6A, 0x94, 0x83, 0xB8, 0x4B, 0x4B, 0x36, + 0xB3, 0x86, 0x1A, 0xA7, 0x25, 0x5E, 0x4C, + 0x02, 0x78, 0xBA, 0x36, 0x04, 0x65, 0x0C, + 0x10, 0xBE, 0x19, 0x48, 0x2F, 0x23, 0x17, + 0x1B, 0x67, 0x1D, 0xF1, 0xCF, 0x3B, 0x96, + 0x0C, 0x07, 0x43, 0x01, 0xCD, 0x93, 0xC1, + 0xD1, 0x76, 0x03, 0xD1, 0x47, 0xDA, 0xE2, + 0xAE, 0xF8, 0x37, 0xA6, 0x29, 0x64, 0xEF, + 0x15, 0xE5, 0xFB, 0x4A, 0xAC, 0x0B, 0x8C, + 0x1C, 0xCA, 0xA4, 0xBE, 0x75, 0x4A, 0xB5, + 0x72, 0x8A, 0xE9, 0x13, 0x0C, 0x4C, 0x7D, + 0x02, 0x88, 0x0A, 0xB9, 0x47, 0x2D, 0x45, + 0x55, 0x62, 0x16, 0xD6, 0x99, 0x8B, 0x86, + 0x82, 0x28, 0x3D, 0x19, 0xD4, 0x2A, 0x90, + 0xD5, 0xEF, 0x8E, 0x5D, 0x32, 0x76, 0x7D, + 0xC2, 0x82, 0x2C, 0x6D, 0xF7, 0x85, 0x45, + 0x75, 0x38, 0xAB, 0xAE, 0x83, 0x06, 0x3E, + 0xD9, 0xCB, 0x87, 0xC2, 0xD3, 0x70, 0xF2, + 0x63, 0xD5, 0xFA, 0xD7, 0x46, 0x6D, 0x84, + 0x99, 0xEB, 0x8F, 0x46, 0x4A, 0x70, 0x25, + 0x12, 0xB0, 0xCE, 0xE7, 0x71, 0xE9, 0x13, + 0x0D, 0x69, 0x77, 0x35, 0xF8, 0x97, 0xFD, + 0x03, 0x6C, 0xC5, 0x04, 0x32, 0x6C, 0x3B, + 0x01, 0x39, 0x9F, 0x64, 0x35, 0x32, 0x29, + 0x0F, 0x95, 0x8C, 0x0B, 0xBD, 0x90, 0x06, + 0x5D, 0xF0, 0x8B, 0xAB, 0xBD, 0x30, 0xAE, + 0xB6, 0x3B, 0x84, 0xC4, 0x60, 0x5D, 0x6C, + 0xA3, 0x71, 0x04, 0x71, 0x27, 0xD0, 0x3A, + 0x72, 0xD5, 0x98, 0xA1, 0xED, 0xAD, 0xFE, + 0x70, 0x7E, 0x88, 0x47, 0x25, 0xC1, 0x68, + 0x90, 0x54, 0x90, 0x84, 0x00, 0x8D, 0x39, + 0x1E, 0x09, 0x53, 0xC3, 0xF3, 0x6B, 0xC4, + 0x38, 0xCD, 0x08, 0x5E, 0xDD, 0x2D, 0x93, + 0x4C, 0xE1, 0x93, 0x8C, 0x35, 0x7A, 0x71, + 0x1E, 0x0D, 0x4A, 0x34, 0x1A, 0x5B, 0x0A, + 0x85, 0xED, 0x12, 0xC1, 0xF4, 0xE5, 0x15, + 0x6A, 0x26, 0x74, 0x6D, 0xDD, 0xE1, 0x6D, + 0x82, 0x6F, 0x47, 0x7C, 0x97, 0x47, 0x7E, + 0x0A, 0x0F, 0xDF, 0x65, 0x53, 0x14, 0x3E, + 0x2C, 0xA3, 0xA7, 0x35, 0xE0, 0x2E, 0xCC, + 0xD9, 0x4B, 0x27, 0xD0, 0x48, 0x61, 0xD1, + 0x11, 0x9D, 0xD0, 0xC3, 0x28, 0xAD, 0xF3, + 0xF6, 0x8F, 0xB0, 0x94, 0xB8, 0x67, 0x71, + 0x6B, 0xD7, 0xDC, 0x0D, 0xEE, 0xBB, 0x10, + 0xB8, 0x24, 0x0E, 0x68, 0x03, 0x48, 0x93, + 0xEA, 0xD8, 0x2D, 0x54, 0xC9, 0xDA, 0x75, + 0x4C, 0x46, 0xC7, 0xEE, 0xE0, 0xC3, 0x7F, + 0xDB, 0xEE, 0x48, 0x53, 0x60, 0x47, 0xA6, + 0xFA, 0x1A, 0xE4, 0x9A, 0x01, 0x42, 0x49, + 0x1B, 0x61, 0xFD, 0x5A, 0x69, 0x3E, 0x38, + 0x13, 0x60, 0xEA, 0x6E, 0x59, 0x30, 0x13, + 0x23, 0x6F, 0x64, 0xBA, 0x8F, 0x3B, 0x1E, + 0xDD, 0x1B, 0xDE, 0xFC, 0x7F, 0xCA, 0x03, + 0x56, 0xCF, 0x29, 0x87, 0x72, 0xED, 0x9C, + 0x17, 0xA0, 0x98, 0x00, 0xD7, 0x58, 0x35, + 0x29, 0xF6, 0xC8, 0x13, 0xEC, 0x18, 0x8B, + 0xCB, 0x93, 0xD8, 0x43, 0x2D, 0x44, 0x8C, + 0x6D, 0x1F, 0x6D, 0xF5, 0xE7, 0xCD, 0x8A, + 0x76, 0xA2, 0x67, 0x36, 0x5D, 0x67, 0x6A, + 0x5D, 0x8D, 0xED, 0xBF, 0x8A, 0x23, 0xF3, + 0x66, 0x12, 0xA5, 0x99, 0x90, 0x28, 0xA8, + 0x95, 0xEB, 0xD7, 0xA1, 0x37, 0xDC, 0x7A, + 0x00, 0x9B, 0xC6, 0x69, 0x5F, 0xAC, 0xC1, + 0xE5, 0x00, 0xE3, 0x25, 0xC9, 0x76, 0x78, + 0x19, 0x75, 0x0A, 0xE8, 0xB9, 0x0E, 0x81, + 0xFA, 0x41, 0x6B, 0xE7, 0x37, 0x3A, 0x7F, + 0x7B, 0x6A, 0xAF, 0x38, 0x17, 0xA3, 0x4C, + 0x06, 0x41, 0x5A, 0xD4, 0x20, 0x18, 0xC8, + 0x05, 0x8E, 0x4F, 0x2C, 0xF3, 0xE4, 0xBF, + 0xDF, 0x63, 0xF4, 0x79, 0x91, 0xD4, 0xBD, + 0x3F, 0x1B, 0x66, 0x44, 0x5F, 0x07, 0x8E, + 0xA2, 0xDB, 0xFF, 0xAC, 0x2D, 0x62, 0xA5, + 0xEA, 0x03, 0xD9, 0x15, 0xA0, 0xAA, 0x55, + 0x66, 0x47, 0xB6, 0xBF, 0x5F, 0xA4, 0x70, + 0xEC, 0x0A, 0x66, 0x2F, 0x69, 0x07, 0xC0, + 0x1B, 0xF0, 0x53, 0xCB, 0x8A, 0xF7, 0x79, + 0x4D, 0xF1, 0x94, 0x03, 0x50, 0xEA, 0xC5, + 0xDB, 0xE2, 0xED, 0x3B, 0x7A, 0xA8, 0x55, + 0x1E, 0xC5, 0x0F, 0xDF, 0xF8, 0x75, 0x8C, + 0xE6, 0x58, 0xD1, 0x89, 0xEA, 0xAE, 0x6D, + 0x2B, 0x64, 0xF6, 0x17, 0x79, 0x4B, 0x19, + 0x1C, 0x3F, 0xF4, 0x6B, 0xB7, 0x1E, 0x02, + 0x34, 0x02, 0x1F, 0x47, 0xB3, 0x1F, 0xA4, + 0x30, 0x77, 0x09, 0x5F, 0x96, 0xAD, 0x85, + 0xBA, 0x3A, 0x6B, 0x73, 0x4A, 0x7C, 0x8F, + 0x36, 0xDF, 0x08, 0xAC, 0xBA, 0x51, 0xC9, + 0x37, 0x89, 0x7F, 0x72, 0xF2, 0x1C, 0x3B, + 0xBE, 0x5B, 0x54, 0x99, 0x6F, 0xC6, 0x6C, + 0x5F, 0x62, 0x68, 0x39, 0xDC, 0x98, 0xDD, + 0x1D, 0xE4, 0x19, 0x5B, 0x46, 0xCE, 0xE9, + 0x80, 0x3A, 0x0F, 0xD3, 0xDF, 0xC5, 0x7E, + 0x23, 0xF6, 0x92, 0xBB, 0x7B, 0x49, 0xB5, + 0xD2, 0x12, 0x33, 0x1D, 0x55, 0xB1, 0xCE, + 0x2D, 0x72, 0x7A, 0xB4, 0x1A, 0x11, 0xDA, + 0x3A, 0x15, 0xF8, 0xE4, 0xBC, 0x11, 0xC7, + 0x8B, 0x65, 0xF1, 0xCE, 0xB2, 0x96, 0xF1, + 0xFE, 0xDC, 0x5F, 0x7E, 0x42, 0x45, 0x6C, + 0x91, 0x11, 0x17, 0x02, 0x52, 0x01, 0xBE, + 0x03, 0x89, 0xF5, 0xAB, 0xD4, 0x0D, 0x11, + 0xF8, 0x63, 0x9A, 0x39, 0xFE, 0x32, 0x36, + 0x75, 0x18, 0x35, 0xA5, 0xE5, 0xE4, 0x43, + 0x17, 0xC1, 0xC2, 0xEE, 0xFD, 0x4E, 0xA5, + 0xBF, 0xD1, 0x60, 0x43, 0xF4, 0x3C, 0xB4, + 0x19, 0x81, 0xF6, 0xAD, 0xEE, 0x9D, 0x03, + 0x15, 0x9E, 0x7A, 0xD9, 0xD1, 0x3C, 0x53, + 0x36, 0x95, 0x09, 0xFC, 0x1F, 0xA2, 0x7C, + 0x16, 0xEF, 0x98, 0x87, 0x70, 0x3A, 0x55, + 0xB5, 0x1B, 0x22, 0xCB, 0xF4, 0x4C, 0xD0, + 0x12, 0xAE, 0xE0, 0xB2, 0x79, 0x8E, 0x62, + 0x84, 0x23, 0x42, 0x8E, 0xFC, 0xD5, 0xA4, + 0x0C, 0xAE, 0xF6, 0xBF, 0x50, 0xD8, 0xEA, + 0x88, 0x5E, 0xBF, 0x73, 0xA6, 0xB9, 0xFD, + 0x79, 0xB5, 0xE1, 0x8F, 0x67, 0xD1, 0x34, + 0x1A, 0xC8, 0x23, 0x7A, 0x75, 0xC3, 0xCF, + 0xC9, 0x20, 0x04, 0xA1, 0xC5, 0xA4, 0x0E, + 0x36, 0x6B, 0xC4, 0x4D, 0x00, 0x17, 0x6A, + 0xF7, 0x1C, 0x15, 0xE4, 0x8C, 0x86, 0xD3, + 0x7E, 0x01, 0x37, 0x23, 0xCA, 0xAC, 0x72, + 0x23, 0xAB, 0x3B, 0xF4, 0xD5, 0x4F, 0x18, + 0x28, 0x71, 0x3B, 0x2B, 0x4A, 0x6F, 0xE4, + 0x0F, 0xAB, 0x74, 0x40, 0x5C, 0xB7, 0x38, + 0xB0, 0x64, 0xC0, 0x6E, 0xCC, 0x76, 0xE9, + 0xEF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, + 0xFF, 0xFF +}; + +const gnutls_datum_t gnutls_modp_8192_group_prime = { + (void *) modp_params_8192, sizeof(modp_params_8192) +}; +const gnutls_datum_t gnutls_modp_8192_group_q = { + (void *) modp_q_8192, sizeof(modp_q_8192) +}; +const gnutls_datum_t gnutls_modp_8192_group_generator = { + (void *) &modp_generator, sizeof(modp_generator) +}; +const unsigned int gnutls_modp_8192_key_bits = 512; + #endif diff --git a/lib/dh.h b/lib/dh.h index 9f3dc2a70..a64a4eb5e 100644 --- a/lib/dh.h +++ b/lib/dh.h @@ -31,4 +31,33 @@ _gnutls_figure_dh_params(gnutls_session_t session, gnutls_dh_params_t dh_params, int _gnutls_set_cred_dh_params(gnutls_dh_params_t *cparams, gnutls_sec_param_t sec_param); +/* The static parameters defined in RFC 3526, used for the approved + * primes check in SP800-56A (Appendix D). + */ + +extern const gnutls_datum_t gnutls_modp_8192_group_prime; +extern const gnutls_datum_t gnutls_modp_8192_group_q; +extern const gnutls_datum_t gnutls_modp_8192_group_generator; +extern const unsigned int gnutls_modp_8192_key_bits; + +extern const gnutls_datum_t gnutls_modp_6144_group_prime; +extern const gnutls_datum_t gnutls_modp_6144_group_q; +extern const gnutls_datum_t gnutls_modp_6144_group_generator; +extern const unsigned int gnutls_modp_6144_key_bits; + +extern const gnutls_datum_t gnutls_modp_4096_group_prime; +extern const gnutls_datum_t gnutls_modp_4096_group_q; +extern const gnutls_datum_t gnutls_modp_4096_group_generator; +extern const unsigned int gnutls_modp_4096_key_bits; + +extern const gnutls_datum_t gnutls_modp_3072_group_prime; +extern const gnutls_datum_t gnutls_modp_3072_group_q; +extern const gnutls_datum_t gnutls_modp_3072_group_generator; +extern const unsigned int gnutls_modp_3072_key_bits; + +extern const gnutls_datum_t gnutls_modp_2048_group_prime; +extern const gnutls_datum_t gnutls_modp_2048_group_q; +extern const gnutls_datum_t gnutls_modp_2048_group_generator; +extern const unsigned int gnutls_modp_2048_key_bits; + #endif /* GNUTLS_LIB_DH_H */ -- 2.26.2 From 3f4532862bf9140976d970ab14e102cede61d1c7 Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Fri, 26 Jun 2020 10:21:26 +0200 Subject: [PATCH 2/2] dhe: check if DH params in SKE match the FIPS approved algorithms SP800-56A rev. 3 restricts the FIPS compliant clients to use only approved DH parameters, defined in RFC 7919 and RFC 3526. This adds a check in the handling of ServerKeyExchange if DHE is negotiated. Signed-off-by: Daiki Ueno --- doc/credentials/Makefile.am | 24 ++++ .../dhparams/rfc2409-group-1-768.pem | 5 + .../dhparams/rfc2409-group-2-1024.pem | 5 + .../dhparams/rfc3526-group-14-2048.pem | 8 ++ .../dhparams/rfc3526-group-15-3072.pem | 11 ++ .../dhparams/rfc3526-group-16-4096.pem | 13 ++ .../dhparams/rfc3526-group-17-6144.pem | 19 +++ .../dhparams/rfc3526-group-18-8192.pem | 24 ++++ .../dhparams/rfc3526-group-5-1536.pem | 7 + doc/credentials/dhparams/rfc5054-1024.pem | 5 + doc/credentials/dhparams/rfc5054-1536.pem | 7 + doc/credentials/dhparams/rfc5054-2048.pem | 8 ++ doc/credentials/dhparams/rfc5054-3072.pem | 11 ++ doc/credentials/dhparams/rfc5054-4096.pem | 13 ++ doc/credentials/dhparams/rfc5054-6144.pem | 19 +++ doc/credentials/dhparams/rfc5054-8192.pem | 24 ++++ .../dhparams/rfc5114-group-22-1024.pem | 8 ++ .../dhparams/rfc5114-group-23-2048.pem | 13 ++ .../dhparams/rfc5114-group-24-2048.pem | 13 ++ .../dhparams/rfc7919-ffdhe2048.pem | 8 ++ .../dhparams/rfc7919-ffdhe3072.pem | 11 ++ .../dhparams/rfc7919-ffdhe4096.pem | 14 ++ .../dhparams/rfc7919-ffdhe6144.pem | 19 +++ .../dhparams/rfc7919-ffdhe8192.pem | 24 ++++ lib/auth/dh_common.c | 8 ++ lib/dh-primes.c | 34 +++++ lib/dh.h | 6 + tests/Makefile.am | 2 + tests/client-sign-md5-rep.c | 5 + tests/dh-fips-approved.sh | 127 ++++++++++++++++++ tests/utils.c | 58 ++++---- 31 files changed, 521 insertions(+), 32 deletions(-) create mode 100644 doc/credentials/dhparams/rfc2409-group-1-768.pem create mode 100644 doc/credentials/dhparams/rfc2409-group-2-1024.pem create mode 100644 doc/credentials/dhparams/rfc3526-group-14-2048.pem create mode 100644 doc/credentials/dhparams/rfc3526-group-15-3072.pem create mode 100644 doc/credentials/dhparams/rfc3526-group-16-4096.pem create mode 100644 doc/credentials/dhparams/rfc3526-group-17-6144.pem create mode 100644 doc/credentials/dhparams/rfc3526-group-18-8192.pem create mode 100644 doc/credentials/dhparams/rfc3526-group-5-1536.pem create mode 100644 doc/credentials/dhparams/rfc5054-1024.pem create mode 100644 doc/credentials/dhparams/rfc5054-1536.pem create mode 100644 doc/credentials/dhparams/rfc5054-2048.pem create mode 100644 doc/credentials/dhparams/rfc5054-3072.pem create mode 100644 doc/credentials/dhparams/rfc5054-4096.pem create mode 100644 doc/credentials/dhparams/rfc5054-6144.pem create mode 100644 doc/credentials/dhparams/rfc5054-8192.pem create mode 100644 doc/credentials/dhparams/rfc5114-group-22-1024.pem create mode 100644 doc/credentials/dhparams/rfc5114-group-23-2048.pem create mode 100644 doc/credentials/dhparams/rfc5114-group-24-2048.pem create mode 100644 doc/credentials/dhparams/rfc7919-ffdhe2048.pem create mode 100644 doc/credentials/dhparams/rfc7919-ffdhe3072.pem create mode 100644 doc/credentials/dhparams/rfc7919-ffdhe4096.pem create mode 100644 doc/credentials/dhparams/rfc7919-ffdhe6144.pem create mode 100644 doc/credentials/dhparams/rfc7919-ffdhe8192.pem create mode 100755 tests/dh-fips-approved.sh diff --git a/doc/credentials/Makefile.am b/doc/credentials/Makefile.am index ecdd57a10..25778856f 100644 --- a/doc/credentials/Makefile.am +++ b/doc/credentials/Makefile.am @@ -31,3 +31,27 @@ EXTRA_DIST += srp-passwd.txt srp-tpasswd.conf EXTRA_DIST += psk-passwd.txt +EXTRA_DIST += \ + dhparams/rfc2409-group-1-768.pem \ + dhparams/rfc2409-group-2-1024.pem \ + dhparams/rfc3526-group-14-2048.pem \ + dhparams/rfc3526-group-15-3072.pem \ + dhparams/rfc3526-group-16-4096.pem \ + dhparams/rfc3526-group-17-6144.pem \ + dhparams/rfc3526-group-18-8192.pem \ + dhparams/rfc3526-group-5-1536.pem \ + dhparams/rfc5054-1024.pem \ + dhparams/rfc5054-1536.pem \ + dhparams/rfc5054-2048.pem \ + dhparams/rfc5054-3072.pem \ + dhparams/rfc5054-4096.pem \ + dhparams/rfc5054-6144.pem \ + dhparams/rfc5054-8192.pem \ + dhparams/rfc5114-group-22-1024.pem \ + dhparams/rfc5114-group-23-2048.pem \ + dhparams/rfc5114-group-24-2048.pem \ + dhparams/rfc7919-ffdhe2048.pem \ + dhparams/rfc7919-ffdhe3072.pem \ + dhparams/rfc7919-ffdhe4096.pem \ + dhparams/rfc7919-ffdhe6144.pem \ + dhparams/rfc7919-ffdhe8192.pem diff --git a/doc/credentials/dhparams/rfc2409-group-1-768.pem b/doc/credentials/dhparams/rfc2409-group-1-768.pem new file mode 100644 index 000000000..33a617018 --- /dev/null +++ b/doc/credentials/dhparams/rfc2409-group-1-768.pem @@ -0,0 +1,5 @@ +-----BEGIN DH PARAMETERS----- +MGYCYQD//////////8kP2qIhaMI0xMZii4DcHNEpAk4IimfMdAILvqY7E5siUUoI +eY40BN3vlRmzzTpDGzArCm3yXxQ3T+E1bW1RwkXkhbV2Yl5+xvRMQummOjYg//// +//////8CAQI= +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc2409-group-2-1024.pem b/doc/credentials/dhparams/rfc2409-group-2-1024.pem new file mode 100644 index 000000000..bbfb1bfb6 --- /dev/null +++ b/doc/credentials/dhparams/rfc2409-group-2-1024.pem @@ -0,0 +1,5 @@ +-----BEGIN DH PARAMETERS----- +MIGHAoGBAP//////////yQ/aoiFowjTExmKLgNwc0SkCTgiKZ8x0Agu+pjsTmyJRSgh5jjQE +3e+VGbPNOkMbMCsKbfJfFDdP4TVtbVHCReSFtXZiXn7G9ExC6aY37WsL/1y29Aa37e44a/ta +iZ+lrp8kEXxLH+ZJKGZR7OZTgf//////////AgEC +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc3526-group-14-2048.pem b/doc/credentials/dhparams/rfc3526-group-14-2048.pem new file mode 100644 index 000000000..b15071532 --- /dev/null +++ b/doc/credentials/dhparams/rfc3526-group-14-2048.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBCAKCAQEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqsqmj//////////wIBAg== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc3526-group-15-3072.pem b/doc/credentials/dhparams/rfc3526-group-15-3072.pem new file mode 100644 index 000000000..f27b77820 --- /dev/null +++ b/doc/credentials/dhparams/rfc3526-group-15-3072.pem @@ -0,0 +1,11 @@ +-----BEGIN DH PARAMETERS----- +MIIBiAKCAYEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqTrS +yv//////////AgEC +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc3526-group-16-4096.pem b/doc/credentials/dhparams/rfc3526-group-16-4096.pem new file mode 100644 index 000000000..a734b9050 --- /dev/null +++ b/doc/credentials/dhparams/rfc3526-group-16-4096.pem @@ -0,0 +1,13 @@ +-----BEGIN DH PARAMETERS----- +MIICCAKCAgEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqSEI +ARpyPBKnh+bXiHGaEL26WyaZwycYavTiPBqUaDS2FQvaJYPpyirUTOjbu8LbBN6O ++S6O/BQfvsqmKHxZR05rwF2ZspZPoJDDoiM7oYZRW+ftH2EpcM7i16+4G912IXBI +HNAGkSfVsFqpk7TqmI2P3cGG/7fckKbAj030Nck0BjGZ//////////8CAQI= +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc3526-group-17-6144.pem b/doc/credentials/dhparams/rfc3526-group-17-6144.pem new file mode 100644 index 000000000..d8307bda3 --- /dev/null +++ b/doc/credentials/dhparams/rfc3526-group-17-6144.pem @@ -0,0 +1,19 @@ +-----BEGIN DH PARAMETERS----- +MIIDCAKCAwEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqSEI +ARpyPBKnh+bXiHGaEL26WyaZwycYavTiPBqUaDS2FQvaJYPpyirUTOjbu8LbBN6O ++S6O/BQfvsqmKHxZR05rwF2ZspZPoJDDoiM7oYZRW+ftH2EpcM7i16+4G912IXBI +HNAGkSfVsFqpk7TqmI2P3cGG/7fckKbAj030Nck0AoSSNsP6tNJ8cCbB1NyyYCZG +3sl1HnY9uje9+P+UBq2eUw7l2zgvQTABrrBqU+2QJ9gxF5cnsIZaiRjaPtvrz5sU +7UTObLrO1Lsb238UR+bMJUszIFFRK9evQm+49AE3jNK/WYPKAcZLkuzwMuoV0XId +A/SC185udP721V5wL0aYDIK1qEAxkAscnlnnyX++x+jzI6l6fjbMiL4PHUW3/1ha +xUvUB7IrQVSqzI9tfr9I4dgUzF7SD4A34KeXFe7ym+MoBqHVi7fF2nb1UKo9ih+/ +8OsZzLGjE9Vc2lbJ7C7yljI4f+jXbjwEaAQ+j2Y/SGDuEr8tWwt0dNbmlPkebcxA +JP//////////AgEC +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc3526-group-18-8192.pem b/doc/credentials/dhparams/rfc3526-group-18-8192.pem new file mode 100644 index 000000000..af54dd656 --- /dev/null +++ b/doc/credentials/dhparams/rfc3526-group-18-8192.pem @@ -0,0 +1,24 @@ +-----BEGIN DH PARAMETERS----- +MIIECAKCBAEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqSEI +ARpyPBKnh+bXiHGaEL26WyaZwycYavTiPBqUaDS2FQvaJYPpyirUTOjbu8LbBN6O ++S6O/BQfvsqmKHxZR05rwF2ZspZPoJDDoiM7oYZRW+ftH2EpcM7i16+4G912IXBI +HNAGkSfVsFqpk7TqmI2P3cGG/7fckKbAj030Nck0AoSSNsP6tNJ8cCbB1NyyYCZG +3sl1HnY9uje9+P+UBq2eUw7l2zgvQTABrrBqU+2QJ9gxF5cnsIZaiRjaPtvrz5sU +7UTObLrO1Lsb238UR+bMJUszIFFRK9evQm+49AE3jNK/WYPKAcZLkuzwMuoV0XId +A/SC185udP721V5wL0aYDIK1qEAxkAscnlnnyX++x+jzI6l6fjbMiL4PHUW3/1ha +xUvUB7IrQVSqzI9tfr9I4dgUzF7SD4A34KeXFe7ym+MoBqHVi7fF2nb1UKo9ih+/ +8OsZzLGjE9Vc2lbJ7C7yljI4f+jXbjwEaAQ+j2Y/SGDuEr8tWwt0dNbmlPkebb4R +WXSjkm8S/uXkOHd8tqky34zYvsTQc7kxujvIMraNndMAdB+nv4r8R+0ldvaTa6Qk +ZjqrY5xa5PVoNCO0dCvxyXgjjxbL451lLeP9uL78hIrZIiIuBKQDfAcT61eoGiPw +xzRz/GRs6jBrS8vIhi+Dhd36nUt/osCH6HloMwPtW906Bis89bOieKZtKhP4P0T4 +Ld8xDuB0q2o2RZfomaAlXcFk8xzFCEaFHfmrSBld7X6hsdUQvX7nTXP682vDHs+i +aDWQRvTrh5+SQAlDi0gcbNeImgAu1e44K8kZDab8Am5HlVjkR1Z36aqeMFDidlaU +38gfVuiAuW5xYMmA3Zjt09///////////wIBAg== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc3526-group-5-1536.pem b/doc/credentials/dhparams/rfc3526-group-5-1536.pem new file mode 100644 index 000000000..44df6de65 --- /dev/null +++ b/doc/credentials/dhparams/rfc3526-group-5-1536.pem @@ -0,0 +1,7 @@ +-----BEGIN DH PARAMETERS----- +MIHHAoHBAP//////////yQ/aoiFowjTExmKLgNwc0SkCTgiKZ8x0Agu+pjsTmyJR +Sgh5jjQE3e+VGbPNOkMbMCsKbfJfFDdP4TVtbVHCReSFtXZiXn7G9ExC6aY37WsL +/1y29Aa37e44a/taiZ+lrp8kEXxLH+ZJKGZR7ORbPcIAfLihY78FmNpINhxV05pp +Fj+o/STPX4NlXSPco62WHGLzViCFUrue1SkHcJaWbWcMNU5KvJgE8XRsCMojcyf/ +/////////wIBAg== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-1024.pem b/doc/credentials/dhparams/rfc5054-1024.pem new file mode 100644 index 000000000..33aed9fab --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-1024.pem @@ -0,0 +1,5 @@ +-----BEGIN DH PARAMETERS----- +MIGHAoGBAO6vCrmts43WnDP4CvqPxehgcmGHdf88C56iMUycJWV21nTfdJbqgdM4 +O0gT1pLG4ODV2OJQuYvkjklcHWCJ2tFdx9e0YVTWts6O9K1psV1JglWbKXvPGIXF +KfVmZg5X7GjtvDwFcmzAL9TL9Jduqpr9UTj+g3ZDW5/GHS/A6wbjAgEC +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-1536.pem b/doc/credentials/dhparams/rfc5054-1536.pem new file mode 100644 index 000000000..dc2db6b42 --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-1536.pem @@ -0,0 +1,7 @@ +-----BEGIN DH PARAMETERS----- +MIHHAoHBAJ3vPK+5OSd6sfEqhheke7vbpR30maxMgL7uqWFLGcxNX09fVW4ny95R +xqlL5GB6KRVYkDug0PhDgLZVu5oi6NzfAop87Gfw0IE0sci5eYkUm2CeC+O6tj1H +VIOB28Wx/HZOP0tT3Z2hFYv9PiucjPVu3wGVOTSWJ9sv1T0kt8SGZXcuQ31sf4zk +QnNK98y3roN8Jkrjqb64f4ov6bi1KS5aAh//XpFHnoznoowkQsbzFRgPk0maI03P +duP+0TX5uwIBAg== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-2048.pem b/doc/credentials/dhparams/rfc5054-2048.pem new file mode 100644 index 000000000..814e70ce6 --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-2048.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBCAKCAQEArGvbQTJKmpvxZt5eE4lYL69ytmUZh+4H/DGSlD21YFCjcynLtKCZ +7YGT4HV3Z6E91SMSq0sDMQ3Nf0ip2gT9UOgIOWntt2ewz2CVF5oWOrNmGgX71fqq +6CkYqZYvC5O4Vfl5k+yXXuqoDXQK2/T/dHNZ0EHVwz6nHSgeRGsUdzvKl7Q6I/uA +Fna9IHpDbGSB8dK5B4cXRhpbnTLmiPh3SFRFI7UksNV9Xqd6J3XS7PoDLPvb9S+z +eGFgJ5AE5Xrmr4dOcwPOUymczAQce8MI2CpWmPOo0MOCca41+Onb+7aUtcgD2J96 +5DXeI21SX1R1m2XjcvzWjvIPpxEfnkr/cwIBAg== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-3072.pem b/doc/credentials/dhparams/rfc5054-3072.pem new file mode 100644 index 000000000..d84b2424a --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-3072.pem @@ -0,0 +1,11 @@ +-----BEGIN DH PARAMETERS----- +MIIBiAKCAYEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqTrS +yv//////////AgEF +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-4096.pem b/doc/credentials/dhparams/rfc5054-4096.pem new file mode 100644 index 000000000..99ca4456b --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-4096.pem @@ -0,0 +1,13 @@ +-----BEGIN DH PARAMETERS----- +MIICCAKCAgEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqSEI +ARpyPBKnh+bXiHGaEL26WyaZwycYavTiPBqUaDS2FQvaJYPpyirUTOjbu8LbBN6O ++S6O/BQfvsqmKHxZR05rwF2ZspZPoJDDoiM7oYZRW+ftH2EpcM7i16+4G912IXBI +HNAGkSfVsFqpk7TqmI2P3cGG/7fckKbAj030Nck0BjGZ//////////8CAQU= +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-6144.pem b/doc/credentials/dhparams/rfc5054-6144.pem new file mode 100644 index 000000000..97d8d21a9 --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-6144.pem @@ -0,0 +1,19 @@ +-----BEGIN DH PARAMETERS----- +MIIDCAKCAwEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqSEI +ARpyPBKnh+bXiHGaEL26WyaZwycYavTiPBqUaDS2FQvaJYPpyirUTOjbu8LbBN6O ++S6O/BQfvsqmKHxZR05rwF2ZspZPoJDDoiM7oYZRW+ftH2EpcM7i16+4G912IXBI +HNAGkSfVsFqpk7TqmI2P3cGG/7fckKbAj030Nck0AoSSNsP6tNJ8cCbB1NyyYCZG +3sl1HnY9uje9+P+UBq2eUw7l2zgvQTABrrBqU+2QJ9gxF5cnsIZaiRjaPtvrz5sU +7UTObLrO1Lsb238UR+bMJUszIFFRK9evQm+49AE3jNK/WYPKAcZLkuzwMuoV0XId +A/SC185udP721V5wL0aYDIK1qEAxkAscnlnnyX++x+jzI6l6fjbMiL4PHUW3/1ha +xUvUB7IrQVSqzI9tfr9I4dgUzF7SD4A34KeXFe7ym+MoBqHVi7fF2nb1UKo9ih+/ +8OsZzLGjE9Vc2lbJ7C7yljI4f+jXbjwEaAQ+j2Y/SGDuEr8tWwt0dNbmlPkebcxA +JP//////////AgEF +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5054-8192.pem b/doc/credentials/dhparams/rfc5054-8192.pem new file mode 100644 index 000000000..bb54575c7 --- /dev/null +++ b/doc/credentials/dhparams/rfc5054-8192.pem @@ -0,0 +1,24 @@ +-----BEGIN DH PARAMETERS----- +MIIECAKCBAEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb +IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft +awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT +mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh +fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq +5RXSJhiY+gUQFXKOWoqqxC2tMxcNBFB6M6hVIavfHLpk7PuFBFjb7wqK6nFXXQYM +fbOXD4Wm4eTHq/WujNsJM9cejJTgSiVhnc7j0iYa0u5r8S/6BtmKCGTYdgJzPshq +ZFIfKxgXeyAMu+EXV3phXWx3CYjAutlG4gjiT6B05asxQ9tb/OD9EI5LgtEgqSEI +ARpyPBKnh+bXiHGaEL26WyaZwycYavTiPBqUaDS2FQvaJYPpyirUTOjbu8LbBN6O ++S6O/BQfvsqmKHxZR05rwF2ZspZPoJDDoiM7oYZRW+ftH2EpcM7i16+4G912IXBI +HNAGkSfVsFqpk7TqmI2P3cGG/7fckKbAj030Nck0AoSSNsP6tNJ8cCbB1NyyYCZG +3sl1HnY9uje9+P+UBq2eUw7l2zgvQTABrrBqU+2QJ9gxF5cnsIZaiRjaPtvrz5sU +7UTObLrO1Lsb238UR+bMJUszIFFRK9evQm+49AE3jNK/WYPKAcZLkuzwMuoV0XId +A/SC185udP721V5wL0aYDIK1qEAxkAscnlnnyX++x+jzI6l6fjbMiL4PHUW3/1ha +xUvUB7IrQVSqzI9tfr9I4dgUzF7SD4A34KeXFe7ym+MoBqHVi7fF2nb1UKo9ih+/ +8OsZzLGjE9Vc2lbJ7C7yljI4f+jXbjwEaAQ+j2Y/SGDuEr8tWwt0dNbmlPkebb4R +WXSjkm8S/uXkOHd8tqky34zYvsTQc7kxujvIMraNndMAdB+nv4r8R+0ldvaTa6Qk +ZjqrY5xa5PVoNCO0dCvxyXgjjxbL451lLeP9uL78hIrZIiIuBKQDfAcT61eoGiPw +xzRz/GRs6jBrS8vIhi+Dhd36nUt/osCH6HloMwPtW906Bis89bOieKZtKhP4P0T4 +Ld8xDuB0q2o2RZfomaAlXcFk8xzFCEaFHfmrSBld7X6hsdUQvX7nTXP682vDHs+i +aDWQRvTrh5+SQAlDi0gcbNeImgAu1e44K8kZDab8Am5HlVjkR1Z36aqeMFDidlaU +38gfVuiAuW5xYMmA3Zjt09///////////wIBEw== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5114-group-22-1024.pem b/doc/credentials/dhparams/rfc5114-group-22-1024.pem new file mode 100644 index 000000000..759afcb2f --- /dev/null +++ b/doc/credentials/dhparams/rfc5114-group-22-1024.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBCAKBgQCxC4+WoIDgHd6S3l6uXVTsUsmfvPsGo8aaap3KUtI7YWBz4oZ1oj0Y +mDjvHi7mUsAT7LSuqQYRIySXXDzUm4O/rMvdfZDEvXCYSI6cIZpzck7/1vrlZEc4 ++qMaT/VbzMChUa9fDci0vUW/N982XBpl5oz9p21NpwjfH7K8LkpDcQKBgQCk0cvV +w/00EmdlpELvuZkF+BBN0lisUH/WQGz/FCZtMSZv6h5cQVZLd35pD1UE8hMWAhe0 +sBuIal6RVH+eJ0n01/vX07mpLuGQnQ0iY/gKdqaiTAh6CR9THb8KAWm2oorWYqTR +jnOvoy13nVkY0IvIhY9Nzvl8KiSFXm7rIrOy5Q== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5114-group-23-2048.pem b/doc/credentials/dhparams/rfc5114-group-23-2048.pem new file mode 100644 index 000000000..d4f360ef2 --- /dev/null +++ b/doc/credentials/dhparams/rfc5114-group-23-2048.pem @@ -0,0 +1,13 @@ +-----BEGIN DH PARAMETERS----- +MIICCgKCAQEArRB+HpEjqdDWYPqnlVnFH6INZOVoO5/RtUsVl7YdCnXm+hQd+VpW +26+aPEB7od8V6z1oijCcGA4d5rhaEnSgpm0/gVKtasISkDfJ7e/aTfjZHo/vVbc5 +S3rVt9C2wSIHyfmNEe002/bGugssi7wnvmoA4KC5xJcIs7+KMXCRiDaBKGEwvImF +2xYC5xRBXZMwJ4Jzx94x79xzEPcSH9WgdBWYfZrcCkhtzfk6zEQyg4cxXXXhmMZB +pIDNhqG55YfovmDmnMkosrnFIXLkEwQumyPxCw4W55djybU9z0uoCinj+3PBa451 +uX7zY+L/ox9xz53lOE5xuBwKxN/+DBDmTwKCAQEArEAy708tmuOd8wtcj/2sUGze +vnuJmYyvdIZqCM/k/+OmgkpOELmm8N2SHwGnDEr6q3OddwDCn1LFfbF8YgqGUr5e +kAGo1mrXwXZpEBmZAkr00CcnWsE0i7inYtBSG8mK4kcVBCLqHtQJk51U2nRgzbX2 +xrJQcXy+8YDrNBGOmNEZUppF1vg0Vm4wJeMWozDvu3eobwwasVsFGuPUKMj4rLcK +gTcVC47rEOGD7dGZY93Z4mPkdwWJ72qiHn9fL/OBtTnM40CdE81Wavu0jWwBkYHh +vP6UswJp7f5y/ptqpL17Wg8ccc//TBnEGOH27AF5gbwIfypwZbOEuJDTGR8r+g== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc5114-group-24-2048.pem b/doc/credentials/dhparams/rfc5114-group-24-2048.pem new file mode 100644 index 000000000..dc0211648 --- /dev/null +++ b/doc/credentials/dhparams/rfc5114-group-24-2048.pem @@ -0,0 +1,13 @@ +-----BEGIN DH PARAMETERS----- +MIICCQKCAQEAh6jmHbS2Zjz/u9GcZRlZmYzu9ghmDdDyXSzu1ENeOwDgDfjx1hlX +1Pr330VhsqowFsPZETQJb6o79Cltgw6afCCeDGSXUXq9WoqdMGvPZ+2R+eZyW0dY +wCLgse9Cdb97bFv8EdRfkIi5QfVOseWbuLw5oL8SMH9cT9twxYGyP3a2Osrhyqa3 +kC1SUmc1SIoO8TxtmlG/pKs62DR3llJNjvahZ7WkGCXZZ+FE5RQFZCUcysuD5rSG +9rPKP3lxUGAmwLhX9omWKFbe1AEKvQvmIcOjlgpU5xDDdfJjddcBQQOktUMwwZiv +EmEW0iduEXFfaTh3+tfvCcrbCUrpHhoVlwKCAQA/syybcxNNCy53UGZg7b1ITKex +jyHvIFQH9Hk6GguhJRDbwVB3vkY//0/tSqwLtVW+OmwbDGtHsbw3c79+jG9ikBIo ++MKMuxilWuMTQQAKZQGW+THHelfy3fRj5ensFEt3feYqqrioYorDdtKC1u04ZOZ5 +gkKOvIMdFDSPby+Rk7UEWvJ2cWTh38lnwfs/LlWkvRv/6DucgNBSuYXRguoK2yo7 +cxPT/hTISEseBSWIubfSu9LfAWGZ7NBuFVfNCRWzNTu7ZODsN3/QKDcN+StSx4kU +KM3GfrYYS1I9HbJGwy9jB4SQ8A741kfRSNR5VFFeIyfP75jFgmZLTA9sxBZZ +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc7919-ffdhe2048.pem b/doc/credentials/dhparams/rfc7919-ffdhe2048.pem new file mode 100644 index 000000000..9b182b720 --- /dev/null +++ b/doc/credentials/dhparams/rfc7919-ffdhe2048.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD +ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg== +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc7919-ffdhe3072.pem b/doc/credentials/dhparams/rfc7919-ffdhe3072.pem new file mode 100644 index 000000000..fb31ccda5 --- /dev/null +++ b/doc/credentials/dhparams/rfc7919-ffdhe3072.pem @@ -0,0 +1,11 @@ +-----BEGIN DH PARAMETERS----- +MIIBiAKCAYEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD +ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3 +7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32 +nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZsYu +N///////////AgEC +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc7919-ffdhe4096.pem b/doc/credentials/dhparams/rfc7919-ffdhe4096.pem new file mode 100644 index 000000000..ad9f68b1e --- /dev/null +++ b/doc/credentials/dhparams/rfc7919-ffdhe4096.pem @@ -0,0 +1,14 @@ +-----BEGIN DH PARAMETERS----- +MIICCAKCAgEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD +ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3 +7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32 +nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZp4e +8W5vUsMWTfT7eTDp5OWIV7asfV9C1p9tGHdjzx1VA0AEh/VbpX4xzHpxNciG77Qx +iu1qHgEtnmgyqQdgCpGBMMRtx3j5ca0AOAkpmaMzy4t6Gh25PXFAADwqTs6p+Y0K +zAqCkc3OyX3Pjsm1Wn+IpGtNtahR9EGC4caKAH5eZV9q//////////8CAQI= +-----END DH PARAMETERS----- + diff --git a/doc/credentials/dhparams/rfc7919-ffdhe6144.pem b/doc/credentials/dhparams/rfc7919-ffdhe6144.pem new file mode 100644 index 000000000..d8239bb05 --- /dev/null +++ b/doc/credentials/dhparams/rfc7919-ffdhe6144.pem @@ -0,0 +1,19 @@ +-----BEGIN DH PARAMETERS----- +MIIDCAKCAwEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD +ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3 +7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32 +nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZp4e +8W5vUsMWTfT7eTDp5OWIV7asfV9C1p9tGHdjzx1VA0AEh/VbpX4xzHpxNciG77Qx +iu1qHgEtnmgyqQdgCpGBMMRtx3j5ca0AOAkpmaMzy4t6Gh25PXFAADwqTs6p+Y0K +zAqCkc3OyX3Pjsm1Wn+IpGtNtahR9EGC4caKAH5eDdkCC/1ktkUDbHpOZ30sOFMq +OiO6RELK9T6mO7RUMpt2JMiRe91kscD9TLOOjDNMcBw6za0GV/zP7HGbH1w+TkYE +HziBR/tM/bR3pSRx96mpaRC4VTIu22NA2KAO8JI1BRHjCr7B//njom5/sp+MGDAj +w1h+ONoAd9m0dj5OS5Syu8GUxmUed8r5ku6qwCMqKBv2s6c5wSJhFoIK6NtYR6Z8 +vvnJCRtGLVOM1ysDdGrnf15iKSwxFWKoRlBdyC24VDOK5J9SNclbkReMzy3Vys70 +A+ydGBDGJysEWztx+dxrgNY/3UqOmtseaWKmlSbUMWHBpB1XDXk42tSkDjKc0OQO +Zf//////////AgEC +-----END DH PARAMETERS----- diff --git a/doc/credentials/dhparams/rfc7919-ffdhe8192.pem b/doc/credentials/dhparams/rfc7919-ffdhe8192.pem new file mode 100644 index 000000000..4484cf885 --- /dev/null +++ b/doc/credentials/dhparams/rfc7919-ffdhe8192.pem @@ -0,0 +1,24 @@ +-----BEGIN DH PARAMETERS----- +MIIECAKCBAEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD +ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3 +7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32 +nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZp4e +8W5vUsMWTfT7eTDp5OWIV7asfV9C1p9tGHdjzx1VA0AEh/VbpX4xzHpxNciG77Qx +iu1qHgEtnmgyqQdgCpGBMMRtx3j5ca0AOAkpmaMzy4t6Gh25PXFAADwqTs6p+Y0K +zAqCkc3OyX3Pjsm1Wn+IpGtNtahR9EGC4caKAH5eDdkCC/1ktkUDbHpOZ30sOFMq +OiO6RELK9T6mO7RUMpt2JMiRe91kscD9TLOOjDNMcBw6za0GV/zP7HGbH1w+TkYE +HziBR/tM/bR3pSRx96mpaRC4VTIu22NA2KAO8JI1BRHjCr7B//njom5/sp+MGDAj +w1h+ONoAd9m0dj5OS5Syu8GUxmUed8r5ku6qwCMqKBv2s6c5wSJhFoIK6NtYR6Z8 +vvnJCRtGLVOM1ysDdGrnf15iKSwxFWKoRlBdyC24VDOK5J9SNclbkReMzy3Vys70 +A+ydGBDGJysEWztx+dxrgNY/3UqOmtseaWKmlSbUMWHBpB1XDXk42tSkDjKcz/Rq +qjatAEz2AMg4HkJaMdlRrmT9sj/OyVCdQ2h/62nt0cxeC4zDvfZLEO+GtjFCo6uI +KVVbL3R8kyZlyywPHMAb1wIpOIg50q8F5FRQSseLdYKCKEbAujXDX1xZFgzARv2C +UVQfxoychrAiu3CZh2pGDnRRqKkxCXA/7hwhfmw4JuUsUappHg5CPPyZ6eMWUMEh +e2JIFs2tmpX51bgBlIjZwKCh/jB1pXfiMYP4HUo/L6RXHvyM4LqKT+i2hV3+crCm +bt7S+6v75Yow+vq+HF1xqH4vdB74wf6G/qa7/eUwZ38Nl9EdSfeoRD0IIuUGqfRh +TgEeKpSDj/iM1oyLt8XGQkz//////////wIBAg== +-----END DH PARAMETERS----- diff --git a/lib/auth/dh_common.c b/lib/auth/dh_common.c index 19c205bbe..252eea0cb 100644 --- a/lib/auth/dh_common.c +++ b/lib/auth/dh_common.c @@ -257,6 +257,14 @@ _gnutls_proc_dh_common_server_kx(gnutls_session_t session, } } +#ifdef ENABLE_FIPS140 + if (gnutls_fips140_mode_enabled() && + !_gnutls_dh_prime_is_fips_approved(data_p, n_p, data_g, n_g)) { + gnutls_assert(); + return GNUTLS_E_RECEIVED_ILLEGAL_PARAMETER; + } +#endif + if (_gnutls_mpi_init_scan_nz(&session->key.proto.tls12.dh.params.params[DH_G], data_g, _n_g) != 0) { gnutls_assert(); return GNUTLS_E_RECEIVED_ILLEGAL_PARAMETER; diff --git a/lib/dh-primes.c b/lib/dh-primes.c index 5d2dce0fb..a43a8e5de 100644 --- a/lib/dh-primes.c +++ b/lib/dh-primes.c @@ -1893,4 +1893,38 @@ const gnutls_datum_t gnutls_modp_8192_group_generator = { }; const unsigned int gnutls_modp_8192_key_bits = 512; +unsigned +_gnutls_dh_prime_is_fips_approved(const uint8_t *prime, + size_t prime_size, + const uint8_t *generator, + size_t generator_size) +{ + static const struct { + const gnutls_datum_t *prime; + const gnutls_datum_t *generator; + } primes[] = { + { &gnutls_ffdhe_8192_group_prime, &gnutls_ffdhe_8192_group_generator }, + { &gnutls_ffdhe_6144_group_prime, &gnutls_ffdhe_6144_group_generator }, + { &gnutls_ffdhe_4096_group_prime, &gnutls_ffdhe_4096_group_generator }, + { &gnutls_ffdhe_3072_group_prime, &gnutls_ffdhe_3072_group_generator }, + { &gnutls_ffdhe_2048_group_prime, &gnutls_ffdhe_2048_group_generator }, + { &gnutls_modp_8192_group_prime, &gnutls_modp_8192_group_generator }, + { &gnutls_modp_6144_group_prime, &gnutls_modp_6144_group_generator }, + { &gnutls_modp_4096_group_prime, &gnutls_modp_4096_group_generator }, + { &gnutls_modp_3072_group_prime, &gnutls_modp_3072_group_generator }, + { &gnutls_modp_2048_group_prime, &gnutls_modp_2048_group_generator }, + }; + size_t i; + + for (i = 0; i < sizeof(primes) / sizeof(primes[0]); i++) { + if (primes[i].prime->size == prime_size && + memcmp(primes[i].prime->data, prime, primes[i].prime->size) == 0 && + primes[i].generator->size == generator_size && + memcmp(primes[i].generator->data, generator, primes[i].generator->size) == 0) + return 1; + } + + return 0; +} + #endif diff --git a/lib/dh.h b/lib/dh.h index a64a4eb5e..672451947 100644 --- a/lib/dh.h +++ b/lib/dh.h @@ -60,4 +60,10 @@ extern const gnutls_datum_t gnutls_modp_2048_group_q; extern const gnutls_datum_t gnutls_modp_2048_group_generator; extern const unsigned int gnutls_modp_2048_key_bits; +unsigned +_gnutls_dh_prime_is_fips_approved(const uint8_t *prime, + size_t prime_size, + const uint8_t *generator, + size_t generator_size); + #endif /* GNUTLS_LIB_DH_H */ diff --git a/tests/Makefile.am b/tests/Makefile.am index 7cdf828e0..13d7ba385 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -522,6 +522,8 @@ endif dist_check_SCRIPTS += gnutls-cli-self-signed.sh gnutls-cli-invalid-crl.sh gnutls-cli-rawpk.sh +dist_check_SCRIPTS += dh-fips-approved.sh + if ENABLE_PKCS11 dist_check_SCRIPTS += p11-kit-trust.sh testpkcs11.sh certtool-pkcs11.sh diff --git a/tests/client-sign-md5-rep.c b/tests/client-sign-md5-rep.c index 1c7877fbd..b1ad46ce9 100644 --- a/tests/client-sign-md5-rep.c +++ b/tests/client-sign-md5-rep.c @@ -468,6 +468,11 @@ void doit(void) int sockets[2]; int err; + /* tls1_hello contains ServerKeyExchange with custom DH + * parameters */ + if (gnutls_fips140_mode_enabled()) + exit(77); + signal(SIGPIPE, SIG_IGN); err = socketpair(AF_UNIX, SOCK_STREAM, 0, sockets); diff --git a/tests/dh-fips-approved.sh b/tests/dh-fips-approved.sh new file mode 100755 index 000000000..136dd15f3 --- /dev/null +++ b/tests/dh-fips-approved.sh @@ -0,0 +1,127 @@ +#!/bin/sh + +# Copyright (C) 2017 Nikos Mavrogiannopoulos +# +# Author: Nikos Mavrogiannopoulos +# +# This file is part of GnuTLS. +# +# GnuTLS is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License as published by the +# Free Software Foundation; either version 3 of the License, or (at +# your option) any later version. +# +# GnuTLS is distributed in the hope that it will be useful, but +# WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU +# General Public License for more details. +# +# You should have received a copy of the GNU Lesser General Public License +# along with this program. If not, see + +srcdir="${srcdir:-.}" +SERV="${SERV:-../src/gnutls-serv${EXEEXT}}" +CLI="${CLI:-../src/gnutls-cli${EXEEXT}}" +unset RETCODE + +if ! test -x "${SERV}"; then + exit 77 +fi + +if ! test -x "${CLI}"; then + exit 77 +fi + +if test "${WINDIR}" != ""; then + exit 77 +fi + +if ! test -z "${VALGRIND}"; then + VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=15" +fi + + +SERV="${SERV} -q" + +. "${srcdir}/scripts/common.sh" + +KEY1=${srcdir}/../doc/credentials/x509/key-rsa.pem +CERT1=${srcdir}/../doc/credentials/x509/cert-rsa.pem +CA1=${srcdir}/../doc/credentials/x509/ca.pem + +ALLOWED_PARAMS=" +rfc3526-group-14-2048 +rfc3526-group-15-3072 +rfc3526-group-16-4096 +rfc3526-group-17-6144 +rfc3526-group-18-8192 +rfc7919-ffdhe2048 +rfc7919-ffdhe3072 +rfc7919-ffdhe4096 +rfc7919-ffdhe6144 +rfc7919-ffdhe8192 +" + +DISALLOWED_PARAMS=" +rfc2409-group-2-1024 +rfc3526-group-5-1536 +rfc5054-1024 +rfc5054-1536 +rfc5054-2048 +rfc5054-3072 +rfc5054-4096 +rfc5054-6144 +rfc5054-8192 +rfc5114-group-22-1024 +rfc5114-group-23-2048 +rfc5114-group-24-2048 +" + +OPTS="--priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:-KX-ALL:+DHE-RSA:+AES-128-GCM:-GROUP-ALL" + +for params in $ALLOWED_PARAMS; do + echo "Checking with approved DH params: $params" + + PARAMS=${srcdir}/../doc/credentials/dhparams/${params}.pem + + eval "${GETPORT}" + launch_server $$ ${OPTS} --x509keyfile ${KEY1} --x509certfile ${CERT1} --dhparams ${PARAMS} + PID=$! + wait_server ${PID} + + ${VALGRIND} "${CLI}" ${OPTS} -p "${PORT}" 127.0.0.1 --verify-hostname=localhost --x509cafile ${CA1} /dev/null || \ + fail ${PID} "handshake should have succeeded!" + + kill ${PID} + wait +done + +for params in $DISALLOWED_PARAMS; do + echo "Checking with non-approved DH params: $params" + + PARAMS=${srcdir}/../doc/credentials/dhparams/${params}.pem + + eval "${GETPORT}" + launch_server $$ ${OPTS} --x509keyfile ${KEY1} --x509certfile ${CERT1} --dhparams ${PARAMS} + PID=$! + wait_server ${PID} + + ${VALGRIND} "${CLI}" ${OPTS} -p "${PORT}" 127.0.0.1 --verify-hostname=localhost --x509cafile ${CA1} /dev/null + + RET=$? + + if test $RET -eq 0; then + if test "${GNUTLS_FORCE_FIPS_MODE}" = 1; then + fail ${PID} "handshake should have failed (FIPS mode 1)!" + fi + else + if test "${GNUTLS_FORCE_FIPS_MODE}" != 1; then + fail ${PID} "handshake should have succeeded (FIPS mode 0)!" + fi + fi + + kill ${PID} + wait +done + +exit 0 diff --git a/tests/utils.c b/tests/utils.c index 9186a1757..60cd79b35 100644 --- a/tests/utils.c +++ b/tests/utils.c @@ -50,47 +50,41 @@ int debug = 0; int error_count = 0; int break_on_error = 0; +/* doc/credentials/dhparams/rfc3526-group-14-2048.pem */ const char *pkcs3 = "-----BEGIN DH PARAMETERS-----\n" - "MIGGAoGAtkxw2jlsVCsrfLqxrN+IrF/3W8vVFvDzYbLmxi2GQv9s/PQGWP1d9i22\n" - "P2DprfcJknWt7KhCI1SaYseOQIIIAYP78CfyIpGScW/vS8khrw0rlQiyeCvQgF3O\n" - "GeGOEywcw+oQT4SmFOD7H0smJe2CNyjYpexBXQ/A0mbTF9QKm1cCAQU=\n" + "MIIBCAKCAQEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb\n" + "IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft\n" + "awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT\n" + "mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh\n" + "fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq\n" + "5RXSJhiY+gUQFXKOWoqsqmj//////////wIBAg==\n" "-----END DH PARAMETERS-----\n"; +/* doc/credentials/dhparams/rfc7919-ffdhe2048.pem */ const char *pkcs3_2048 = "-----BEGIN DH PARAMETERS-----\n" - "MIICDgKCAQEAvVNCqM8M9ZoVYBKEkV2KN8ELHHJ75aTZiK9z6170iKSgbITkOxsd\n" - "aBCLzHZd7d6/2aNofUeuWdDGHm73d8v53ma2HRVCNESeC2LKsEDFG9FjjUeugvfl\n" - "zb85TLZwWT9Lb35Ddhdk7CtxoukjS0/JkCE+8RGzmk5+57N8tNffs4aSSHSe4+cw\n" - "i4wULDxiG2p052czAMP3YR5egWvMuiByhy0vKShiZmOy1/Os5r6E/GUF+298gDjG\n" - "OeaEUF9snrTcoBwB4yNjVSEbuAh5fMd5zFtz2+dzrk9TYZ44u4DQYkgToW05WcmC\n" - "+LG0bLAH6lrJR5OMgyheZEo6F20z/d2yyQKCAQEAtzcuTHW61SFQiDRouk6eD0Yx\n" - "0k1RJdaQdlRf6/Dcc6lEqnbezL90THzvxkBwfJ5jG1VZE7JlVCvLRkBtgb0/6SCf\n" - "MATfEKG2JMOnKsJxvidmKEp4uN32LketXRrrEBl7rS+HABEfKAzqx+J6trBaq25E\n" - "7FVJFsyoa8IL8N8YUWwhE2UuEfmiqQQaeoIUYC/xD2arMXn9N0W84Nyy2S9IL4ct\n" - "e3Azi1Wc8MMfpbxxDRxXCnM2uMkLYWs1lQmcUUX+Uygv3P8lgS+RJ1Pi3+BWMx0S\n" - "ocsZXqOr6dbEF1WOLObQRK7h/MZp80iVUyrBgX0MbVFN9M5i2u4KKTG95VKRtgIC\n" - "AQA=\n" "-----END DH PARAMETERS-----\n"; + "MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz\n" + "+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a\n" + "87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7\n" + "YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi\n" + "7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD\n" + "ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg==\n" + "-----END DH PARAMETERS-----\n"; +/* doc/credentials/dhparams/rfc7919-ffdhe3072.pem */ const char *pkcs3_3072 = "-----BEGIN DH PARAMETERS-----\n" - "MIIDDgKCAYEAtRUay8nDgwE5dSVzW525wEu/d0vrFolvYJSevxg2myj5S+gr3Fgq\n" - "OGaZc4zrBxkxsELc7GuCqaXSOWL4yobT8N05yGbYWkWRPf4crRMx3P7/Gba9WsmH\n" - "BlL71uPf1IN9CanAlabkhV89RKiYaCpUI19+/sq+N2dO874ToBZCNhxZnTgRZ+po\n" - "Gdr6XWM0lQ8imIKSer0px3ZHI+/5gmyPry35tGpwlbyclJAg3wlTSdnqDcLxq7AF\n" - "OZ23PzC3ij7SFErOX9EFBdS2bjtU47O3OkPc9EIYMEv5nwnXICLHslwVifmURAjV\n" - "LfpObL8LYGN4Gac4tFxuDa0PMg0ES5ADugYBwdRFTAtCy5WOYXINzAAOrH9MommT\n" - "rMkELf7JOCaV2ktBsvTlrgMAXeyqbf2YSG6CGjj4QnUuqPybSgwPru7VlahsS2lo\n" - "qjutBPpgIxS53o97Wi3V5kQedKJiNuIDNnJMFNuTADAM+OYwClTH7ZSwTsxEgVpr\n" - "tMH+WnTI7KTJAoIBgQCrELwIUB4oNbf0x+fIpVndhDpl/WcFc/lDtmiRuym5gWbb\n" - "NPeI+1rdhnS2R3+nCJODFQTcPNMgIJuSu2EnDCSs5xJ2k08SAgSzyxEdjBpY7qJe\n" - "+lJPJ12zhcl0vgcvMhb/YgqVe2MKz0RvnYZPwHM/aJbjYjq/6OpK3fVw4M1ZccBK\n" - "QD4OHK8HOvGU7Wf6kRIcxUlfn15spMCIsrAZQBddWLmQgktsxJNUS+AnaPwTBoOv\n" - "nGCr1vzw8OS1DtS03VCmtqt3otXhJ3D2oCIG6ogxVAKfHR30KIfzZLBfmCjdzHmH\n" - "x4OwYTN1wy5juA438QtiDtcgK60ZqSzQO08ZklRncA/TkkyEH6kPn5KSh/hW9O3D\n" - "KZeAY/KF0/Bc1XNtqPEYFb7Vo3rbTsyjXkICN1Hk9S0OIKL42K7rWBepO9KuddSd\n" - "aXgH9staP0HXCyyW1VAyqo0TwcWDhE/R7IQQGGwGyd4rD0T+ySW/t09ox23O6X8J\n" - "FSp6mOVNcuvhB5U2gW8CAgEA\n" "-----END DH PARAMETERS-----\n"; + "MIIBiAKCAYEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz\n" + "+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a\n" + "87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7\n" + "YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi\n" + "7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD\n" + "ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3\n" + "7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32\n" + "nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZsYu\n" + "N///////////AgEC\n" + "-----END DH PARAMETERS-----\n"; void _fail(const char *format, ...) { -- 2.26.2