diff --git a/src/cryptography/hazmat/primitives/asymmetric/dh.py b/src/cryptography/hazmat/primitives/asymmetric/dh.py index 92a493a082cb..4fc995245d95 100644 --- a/src/cryptography/hazmat/primitives/asymmetric/dh.py +++ b/src/cryptography/hazmat/primitives/asymmetric/dh.py @@ -87,8 +87,8 @@ def __init__(self, p, g, q=None): if q is not None and not isinstance(q, six.integer_types): raise TypeError("q must be integer or None") - if q is None and g not in (2, 5): - raise ValueError("DH generator must be 2 or 5") + if g < 2: + raise ValueError("DH generator must be 2 or greater") self._p = p self._g = g diff --git a/tests/hazmat/primitives/test_dh.py b/tests/hazmat/primitives/test_dh.py index fa658ae5ed66..25be51c9200c 100644 --- a/tests/hazmat/primitives/test_dh.py +++ b/tests/hazmat/primitives/test_dh.py @@ -53,7 +53,7 @@ def test_dh_parameternumbers(): with pytest.raises(ValueError): dh.DHParameterNumbers( - 65537, 7 + 65537, 1 ) params = dh.DHParameterNumbers(