* Dirk-Willem van Gulik: > One way to do this a bit more careful may be by comparing the actual > data itself. OpenSSL will output this with the modulus flag: > > openssl genrsa 1024 | openssl rsa -noout -modulus Yes, that's what dowkd is doing (albeit with a somewhat suboptimal algorithm; I should have used the most-significant bits, not the least-significant).