SBR DH key-generation.

Yesugade, Sachin Sachin sachiny
Thu Jan 11 00:32:50 PST 2007


Hi ,

Is there any way to restrict steel-belted radius server's  keys generation (
DH agreement ) to multiple of 64, and only within the range from 512 to
1024.
I am having a test client that uses JCE that restricts the key size and its
range, hence getting a exception: 

java.security.InvalidAlgorithmParameterException: Prime size must be
multiple of 64, and can only range from 512 to 1024 (inclusive)

I have security policy files in <java-home>/lib/security , but keep getting
this exception. Trace indicates a 2048 bit DH key which obviously JCE on
test client blows up on.


Thank
Sachin.





More information about the Hostap mailing list