&gt;  If you try to select your own parameters you&#x27;re probably going to pick wrong, either in the sense of breaking the crypto<p>Is there any known situation in which generating parameters with &#x27;openssl dhparam&#x27; will give you broken&#x2F;weak parameters?<p>&gt; either in the sense of breaking the crypto or making people wonder if you selected your parameters to hide a backdoor<p>This is a concern if you&#x27;re going to distribute your parameters with software, but it could make sense where a sysadmin controls both endpoints, such as a site-to-site VPN.