Re: openssl and DSA q size doubt

Howdy,

> But  my question is why q is not 160 bits but instead 224 bits was used by openssl since the FIPS 186 standard clearly says to use q size 160 bits for p size 1024 bits?
> 
> Can someone familiar with the topic, clarify my doubt please? Maybe I missed some fine points in the standard.

I'd suggest using `genpkey` instead of `dsaparam`, like so:

openssl genpkey -genparam -algorithm DSA -pkeyopt pbits:1024 -pkeyopt 
qbits:160

Cheers,

BBB