diff --git a/src/ssl.c b/src/ssl.c index b8f3d755b..65c20275e 100644 --- a/src/ssl.c +++ b/src/ssl.c @@ -10151,7 +10151,7 @@ int wolfSSL_use_certificate_chain_file_format(WOLFSSL* ssl, const char* file, #ifdef HAVE_ECC -/* Set Temp CTX EC-DHE size in octets, should be 20 - 66 for 160 - 521 bit */ +/* Set Temp CTX EC-DHE size in octets, should be 14 - 66 for 112 - 521 bit */ int wolfSSL_CTX_SetTmpEC_DHE_Sz(WOLFSSL_CTX* ctx, word16 sz) { if (ctx == NULL) @@ -10180,7 +10180,7 @@ int wolfSSL_CTX_SetTmpEC_DHE_Sz(WOLFSSL_CTX* ctx, word16 sz) } -/* Set Temp SSL EC-DHE size in octets, should be 20 - 66 for 160 - 521 bit */ +/* Set Temp SSL EC-DHE size in octets, should be 14 - 66 for 112 - 521 bit */ int wolfSSL_SetTmpEC_DHE_Sz(WOLFSSL* ssl, word16 sz) { if (ssl == NULL || sz < ECC_MINSIZE || sz > ECC_MAXSIZE) diff --git a/wolfssl/wolfcrypt/ecc.h b/wolfssl/wolfcrypt/ecc.h index 15936abae..3c7458931 100644 --- a/wolfssl/wolfcrypt/ecc.h +++ b/wolfssl/wolfcrypt/ecc.h @@ -125,7 +125,7 @@ enum { ECC_MAXNAME = 16, /* MAX CURVE NAME LENGTH */ SIG_HEADER_SZ = 7, /* ECC signature header size (30 81 87 02 42 [R] 02 42 [S]) */ ECC_BUFSIZE = 256, /* for exported keys temp buffer */ - ECC_MINSIZE = 20, /* MIN Private Key size */ + ECC_MINSIZE = 14, /* MIN Private Key size */ ECC_MAXSIZE = 66, /* MAX Private Key size */ ECC_MAXSIZE_GEN = 74, /* MAX Buffer size required when generating ECC keys*/ ECC_MAX_OID_LEN = 16,