[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Another pothole in ISAKMP/Oakley



wrt to the subgroup question ...

If one is using new group mode, one might be advised to acquire some
expertise in determining the size of largest subgroup.  One cannot
simply pick a number at random and use it as a modulus.  Photuris had
good practical advice on this score, and Oakley had a brief discussion
of the problem, some words about Sophie-Germaine primes, Schnorr
subgroups, etc.  But this is a piece of cake.  Solving the problem for
elliptic curve groups is much harder.  That's why there are no new
EC groups (it's not that they eat their young).

Hilarie


Follow-Ups: References: