17 Dec
2003
17 Dec
'03
11:17 p.m.
I don't know. Maybe the right thing to do is require conforming implementations to support a large modulus but include recommended smaller moduli. Then Alice can always force Bob to use the large modulus but, if both agree, they can use something smaller from the standard or even their own home-grown modulus.
Thanks. That's pretty much what we are doing -- requiring a particular 1024-bit modulus but recommending several others as options. There's a 2048 bit optional modulus and may even be a 4096-bit option if I can find one in reasonable time. There was going to be a 512-bit optional modulus but the group has reacted so strongly to it that I'm willing to withdraw it. Phil