[GNUnet-SVN] r35774 - gnunet/src/util

[gnunet]

Author: grothoff
Date: 2015-05-22 09:27:20 +0200 (Fri, 22 May 2015)
New Revision: 35774

Modified:
   gnunet/src/util/crypto_ecc.c
Log:
-use flag to disable key generation test for libgcrypt > 1.7

Modified: gnunet/src/util/crypto_ecc.c
===================================================================
--- gnunet/src/util/crypto_ecc.c        2015-05-21 13:53:52 UTC (rev 35773)
+++ gnunet/src/util/crypto_ecc.c        2015-05-22 07:27:20 UTC (rev 35774)
@@ -492,9 +492,14 @@
   gcry_mpi_t d;
   int rc;
 
+  /* NOTE: For libgcrypt >= 1.7, we do not need the 'eddsa' flag here,
+     but should also be harmless. For libgcrypt < 1.7, using 'eddsa'
+     disables an expensive key testing routine. We do not want to run
+     the expensive check for ECDHE, as we generate TONS of keys to
+     use for a very short time. */
   if (0 != (rc = gcry_sexp_build (&s_keyparam, NULL,
                                   "(genkey(ecc(curve \"" CURVE "\")"
-                                  "(flags eddsa)))")))
+                                  "(flags eddsa no-keytest)))")))
   {
     LOG_GCRY (GNUNET_ERROR_TYPE_ERROR, "gcry_sexp_build", rc);
     return NULL;