diff options.h @ 695:94aa1203be1e

DSS_PROTOK is not necessary now that private keys are included in the random generation input
author Matt Johnston <matt@ucc.asn.au>
date Sat, 23 Feb 2013 17:55:46 +0800
parents c58a15983808
children 91dd8328a3ff
line wrap: on
line diff
--- a/options.h	Sat Feb 23 10:27:49 2013 +0800
+++ b/options.h	Sat Feb 23 17:55:46 2013 +0800
@@ -129,13 +129,6 @@
  * signing operations slightly slower. */
 #define RSA_BLINDING
 
-/* Define DSS_PROTOK to use PuTTY's method of generating the value k for dss,
- * rather than just from the random byte source. Undefining this will save you
- * ~4k in binary size with static uclibc, but your DSS hostkey could be exposed
- * if the random number source isn't good. It happened to Sony. 
- * On systems with a decent random source this isn't required. */
-/* #define DSS_PROTOK */
-
 /* Control the memory/performance/compression tradeoff for zlib.
  * Set windowBits=8 for least memory usage, see your system's
  * zlib.h for full details.