Is it considered bad practice to use the same N and q parameters for all users in an SRP-6A based authentication system?
I know that q MUST be a Sophie Germain prime and N a safe prime, but can they be generated ahead of time and be somewhat fixed / hardcoded in the client and server? Or should I generate a fresh pair for each new user registration?
I imagine, it's better to have a different one for each account, but if it's not affecting the security of the system in any way...
q
? the parameters are usually defined asN
a safe prime andg
its generator which you can create from OpenSSL withopenssl dhparam -text <bit-length>
$\endgroup$