# Ngx\_ssl\_dhparam and dh1024\_p

**URL:** <https://www.ruby-forum.com/t/ngx-ssl-dhparam-and-dh1024-p/237964>\
**Category:** NGINX\
**Created:** [December 9, 2013, 2:55am UTC](https://www.ruby-forum.com/t/ngx-ssl-dhparam-and-dh1024-p/237964 "2013-12-09T02:55:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Detlef\_R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/58f4c7/32.png) [@Detlef\_R](https://www.ruby-forum.com/u/Detlef_R)\
**Post date:** [December 9, 2013, 2:55am UTC](https://www.ruby-forum.com/t/ngx-ssl-dhparam-and-dh1024-p/237964/1 "2013-12-09T02:55:17Z")

</div>

Hi All,

ngx\_event\_openssl.c hs the following around line 535:

ngx\_ssl\_dhparam(ngx\_conf\_t \*cf, ngx\_ssl\_t \*ssl, ngx\_str\_t _file)  
{  
…  
/_  
\* -----BEGIN DH PARAMETERS-----  
\* MIGHAoGBALu8LcrYRnSQfEP89YDpz9vZWKP1aLQtSwju1OsPs1BMbAMCducQgAxc  
\* y7qokiYUxb7spWWl/fHSh6K8BJvmd4Bg6RqSp1fjBI9osHb302zI8pul34HcLKcl  
\* 7OZicMyaUDXYzs7vnqAnSmOrHlj6/UmI0PZdFGdX2gcd8EXP4WubAgEC  
\* -----END DH PARAMETERS-----  
\*/

```
static unsigned char dh1024_p[] = {
    0xBB, 0xBC, 0x2D, 0xCA, 0xD8, 0x46, 0x74, 0x90, 0x7C, 0x43, 

```

0xFC, 0xF5,  
0x80, 0xE9, 0xCF, 0xDB, 0xD9, 0x58, 0xA3, 0xF5, 0x68, 0xB4,  
0x2D, 0x4B,  
0x08, 0xEE, 0xD4, 0xEB, 0x0F, 0xB3, 0x50, 0x4C, 0x6C, 0x03,  
0x02, 0x76,  
0xE7, 0x10, 0x80, 0x0C, 0x5C, 0xCB, 0xBA, 0xA8, 0x92, 0x26,  
0x14, 0xC5,  
0xBE, 0xEC, 0xA5, 0x65, 0xA5, 0xFD, 0xF1, 0xD2, 0x87, 0xA2,  
0xBC, 0x04,  
0x9B, 0xE6, 0x77, 0x80, 0x60, 0xE9, 0x1A, 0x92, 0xA7, 0x57,  
0xE3, 0x04,  
0x8F, 0x68, 0xB0, 0x76, 0xF7, 0xD3, 0x6C, 0xC8, 0xF2, 0x9B,  
0xA5, 0xDF,  
0x81, 0xDC, 0x2C, 0xA7, 0x25, 0xEC, 0xE6, 0x62, 0x70, 0xCC,  
0x9A, 0x50,  
0x35, 0xD8, 0xCE, 0xCE, 0xEF, 0x9E, 0xA0, 0x27, 0x4A, 0x63,  
0xAB, 0x1E,  
0x58, 0xFA, 0xFD, 0x49, 0x88, 0xD0, 0xF6, 0x5D, 0x14, 0x67,  
0x57, 0xDA,  
0x07, 0x1D, 0xF0, 0x45, 0xCF, 0xE1, 0x6B, 0x9B  
};  
…

Searching on the web for the strings (“MIGHAoGBALu8Lcr”, “0xBB, 0xBC,  
0x2D, 0xCA, 0xD8, 0x46, 0x74, 0x90” and “bbbc2dcad8467490”) returned  
hits for nginx (but no hits in a standard somewhere).

Would anyone happen to know where that prime and generator came from?

Does anyone know the subgroup order (or what is the q)? Is q at least  
160-bits (or 2k, where k is 80-bits for the security level offered in  
the 1024-bit DH prime)?

Thanks in advance.

Jeff

---

<div class="post-metadata">

**Author:** ![Jeffrey\_W](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/6f9a4e/32.png) [@Jeffrey\_W](https://www.ruby-forum.com/u/Jeffrey_W)\
**Post date:** [December 9, 2013, 3:54pm UTC](https://www.ruby-forum.com/t/ngx-ssl-dhparam-and-dh1024-p/237964/2 "2013-12-09T15:54:03Z")

</div>

On Dec 9, 2013, at 5:54 , Jeffrey W. wrote:

> ```
> * y7qokiYUxb7spWWl/fHSh6K8BJvmd4Bg6RqSp1fjBI9osHb302zI8pul34HcLKcl
> 0x9B, 0xE6, 0x77, 0x80, 0x60, 0xE9, 0x1A, 0x92, 0xA7, 0x57, 0xE3, 0x04,
> 
> ```
> 
> hits for nginx (but no hits in a standard somewhere).
> 
> Would anyone happen to know where that prime and generator came from?
> 
> Does anyone know the subgroup order (or what is the q)? Is q at least  
> 160-bits (or 2k, where k is 80-bits for the security level offered in  
> the 1024-bit DH prime)?
> 
> Thanks in advance.

This parameters were obtained using “openssl dhparam -C 1024” command.

–  
Igor S.

> **[Advanced Load Balancer, Web Server, & Reverse Proxy - NGINX](https://www.nginx.com/)**
>
> NGINX accelerates content and application delivery, improves security, and facilitates availability and scalability for the busiest websites on the Internet.