commit 1e520e0882d4a8d029fd3f1f39e7a3eee647e1e2
author Hanno Becker <hanno.becker@arm.com> Mon Oct 16 09:21:33 2017 +0100
committer Hanno Becker <hanno.becker@arm.com> Mon Oct 16 09:22:11 2017 +0100
tree 4917dfa12e8dfd45122cd41bca74c405135688eb
parent 2bfb234f6ab09a1dcee1216528dbc3e694931d99

Add warning on the use of RFC 5114 primes

include/polarssl/dhm.h

diff --git a/include/polarssl/dhm.h b/include/polarssl/dhm.h
index 8d64a5f..e8ea172 100644
--- a/include/polarssl/dhm.h
+++ b/include/polarssl/dhm.h
@@ -55,6 +55,12 @@
  *  RFC 3526 4.    3072-bit MODP Group
  *  RFC 5114 2.1.  1024-bit MODP Group with 160-bit Prime Order Subgroup
  *  RFC 5114 2.2.  2048-bit MODP Group with 224-bit Prime Order Subgroup
+ *
+ * \warning The primes from RFC 5114 do not come together with information
+ *          on how they were generated and are therefore not considered
+ *          trustworthy. It is recommended to avoid them and to use the
+ *          nothing-up-my-sleeve primes from RFC 3526 instead.
+ *
  */
 #define POLARSSL_DHM_RFC2409_MODP_1024_P               \
     "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" \