sfs_srp_params5

Overview

Specifies a ``strong prime'' and a generator for use in the SRP protocol. SFS ships with a particular set of parameters because generating new ones can take a considerable amount of CPU time. You can replace these parameters with randomly generated ones using the sfskey srpgen -b bits command.

Note that SRP parameters can afford to be slightly shorter than Rabin public keys, both because SRP is based on discrete logs rather than factoring, and because SRP is used for authentication, not secrecy.

The format of the file is a single line of the form:

N=0xModulus,g=0xGenerator

Modulus is a prime number, represented in hexadecimal, which must satisfy the property that (Modulus-1)/2 is also prime. Generator is an element of the multiplicative group of integers modulo Modulus such that Generator has order (Modulus-1)/2.

Files

/etc/sfs/sfs_srp_params

/usr/local/share/sfs/sfs_srp_params

default parameters for SRP protocol

(Files in /etc/sfs supersede default versions in /usr/local/share/sfs.)