Paul Gofman (@gofman) commented about dlls/bcrypt/gnutls.c:
{ gnutls_privkey_t privkey; gnutls_pubkey_t pubkey;
} a;BCRYPT_DH_PARAMETER_HEADER *dh_params;
Not sure if this matters too much, but an alternative would be to store gnutls_dh_params_t handle here (performing gnutls_dh_params_import_raw() right during import). The practical difference is that any validation on parameters in gnutls will be performed during import (where it probably belongs).