I'm with Dan and Cheryl (and sundry others). An implementation should check for weak/semi-weak keys. If it encounters a problem, just kill the SA and get a new one. This is nicely general for all algorithms. Ran rja@inet.org