[openssl-users] Generating dh parameters multithreaded?

[Michael Wojcik]

> From: openssl-users [mailto:openssl-users-bounces at openssl.org] On Behalf
> Of Salz, Rich via openssl-users
> Sent: Wednesday, March 15, 2017 15:15
> To: Joseph Southwell; openssl-users at openssl.org
> Subject: Re: [openssl-users] Generating dh parameters multithreaded?
> 
> > Are you suggesting that I should modify openssl myself to expose that
> > functionality or are suggesting that there is a way to do that given the already
> > exposed functionality? If it is the latter could you point me in the right
> > direction?
> 
> OpenSSL code does not do what you want.  You'll have to write it

My suggestion, if you were to take that route, would be to use the Engine interface rather than modifying the OpenSSL source. You could take the existing OpenSSL implementation of the functionality, move it into an engine (using one of the existing ones as a template), get that working, and then see about parallelizing it.

I created a modified version of the existing CAPI engine, and it wasn't particularly difficult. If memory serves, the OpenSSL wiki has some material on the subject too.

-- 
Michael Wojcik 
Distinguished Engineer, Micro Focus