SBR DH key-generation.

Yesugade, Sachin (Sachin) sachiny at alcatel-lucent.com
Thu Jan 11 03:32:50 EST 2007


Hi ,

Is there any way to restrict steel-belted radius server's  keys generation (
DH agreement ) to multiple of 64, and only within the range from 512 to
1024.
I am having a test client that uses JCE that restricts the key size and its
range, hence getting a exception: 

java.security.InvalidAlgorithmParameterException: Prime size must be
multiple of 64, and can only range from 512 to 1024 (inclusive)

I have security policy files in <java-home>/lib/security , but keep getting
this exception. Trace indicates a 2048 bit DH key which obviously JCE on
test client blows up on.


Thank
Sachin.




More information about the HostAP mailing list