<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
That said, we should probably support the newer spec:<br>
<blockquote>>>> from Crypto.PublicKey import DSA<br>
>>> DSA.generate(3072)<br>
Traceback (most recent call last):<br>
File "<stdin>", line 1, in <module><br>
File "/usr/lib/python2.7/dist-packages/Crypto/PublicKey/DSA.py",
line 337, in generate<br>
raise ValueError("Number of bits in p must be a multiple of 64
between 512 and 1024, not %d bits" % (bits,))<br>
ValueError: Number of bits in p must be a multiple of 64 between
512 and 1024, not 3072 bits<br>
</blockquote>
<br>
On 01/28/2013 02:21 AM, Legrandin wrote:
<blockquote
cite="mid:CAGfyce2XC2Mv1ro=HL0Wab=AArWCr6x7b2MRn-vPEXWrpkNm0g@mail.gmail.com"
type="cite">I think you are looking at an older FIPS 186 spec.<br>
The current one allows 3072 bits for DSA.<br>
<br>
Besides that, DSA is based on a different hard problem than RSA.<br>
A 1024 bit DSA signature is somewhat more secure than a 1024 bit
RSA signature.<br>
<br>
<div class="gmail_quote">2012/12/12 . <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:dcMhOYBdpZkH@web.de"
target="_blank">dcMhOYBdpZkH@web.de</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
It is important to consider 1024bit DSA - NIST says this too -
not<br>
secure anymore, or do you want your messages to be readable
within your lifetime?.<br>
Since DSA max. key size is 1024bit it's time to think<br>
about removing it completely from pycrypto and use RSA or ECC
(with your<br>
own curves, not NIST's untrustable ones).<br>
<br>
_______________________________________________<br>
pycrypto mailing list<br>
<a moz-do-not-send="true"
href="mailto:pycrypto@lists.dlitz.net">pycrypto@lists.dlitz.net</a><br>
<a moz-do-not-send="true"
href="http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto"
target="_blank">http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto</a><br>
</blockquote>
</div>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
pycrypto mailing list
<a class="moz-txt-link-abbreviated" href="mailto:pycrypto@lists.dlitz.net">pycrypto@lists.dlitz.net</a>
<a class="moz-txt-link-freetext" href="http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto">http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto</a>
</pre>
</blockquote>
<br>
</body>
</html>