tree 17eb7cdce433b630a37ba5a189521fbe10c439b3
parent 5c72a883971a4325f8c62bf07b6d38c20ea47a6a
author Daniel Cohen <dcohen@gatech.edu> 1598990661 -0400
committer Filippo Valsorda <filippo@golang.org> 1601481998 +0000

ssh: remove slow unnecessary diffie-hellman-group-exchange primality check

The existing implementation validates that the prime returned by the server is, in fact, prime, which is extremely slow, especially for large key sizes.

As other implementations, including OpenSSH, do not verify the primality of the provided parameters, this change removes that check.

Fixes golang/go#41151

Change-Id: I7539714c690f08b5792a0c540cbf46c3e81f13ba
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/252337
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Trust: Roland Shoemaker <roland@golang.org>