Commit 80a8d140 authored by Bodo Möller's avatar Bodo Möller
Browse files

length of secret exponent is needed only when we create one

parent 1a76a85c

crypto/dh/dh_key.c

+1 −2
Original line number Diff line number Diff line
@@ -132,10 +132,9 @@ static int generate_key(DH *dh) 
		}

	mont=(BN_MONT_CTX *)dh->method_mont_p;



	l = dh->length ? dh->length : BN_num_bits(dh->p)-1; /* secret exponent length */



	if (generate_new_key)

		{

		l = dh->length ? dh->length : BN_num_bits(dh->p)-1; /* secret exponent length */

		if (!BN_rand(priv_key, l, 0, 0)) goto err;

		}

	if (!dh->meth->bn_mod_exp(dh, pub_key,dh->g,priv_key,dh->p,&ctx,mont)) goto err;