Lines Matching full:safe
11 "safe" domain parameters that are associated with approved named safe-prime
14 applications that cannot be upgraded to use the approved safe-prime groups.
35 Sets or gets a string that associates a B<DH> or B<DHX> named safe prime group
69 Used for DH generation of safe primes using the old safe prime generator code.
71 It is recommended to use a named safe prime group instead, if domain parameter
74 Randomly generated safe primes are not allowed by FIPS, so setting this value
75 for the OpenSSL FIPS provider will instead choose a named safe prime group
104 This specifies that a named safe prime name will be chosen using the "pbits"
109 A safe prime generator. See the "safeprime-generator" type above.
141 named safe prime group instead.
144 The OpenSSL FIPS provider tests if the parameters are either an approved safe
158 DH key is an approved named safe prime group, otherwise it is the same as
163 value of I<q> to be set (note that this is set for named safe prime groups).
176 A B<DH> key can be generated with a named safe prime group by calling:
287 =item RFC 7919 (TLS ffdhe named safe prime groups)
289 =item RFC 3526 (IKE modp named safe prime groups)
302 =item Appendix D: FFC Safe-prime Groups