oss-sec mailing list archives

Re: Logjam attack / Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice


From: Alan Coopersmith <alan.coopersmith () oracle com>
Date: Wed, 20 May 2015 17:23:40 -0700

On 05/20/15 04:57 AM, Yves-Alexis Perez wrote:
I guess most people will already have seen that, but just in case,
because it might interest readers (even though it's not specifically
about open source stuff).

https://weakdh.org/
https://weakdh.org/imperfect-forward-secrecy.pdf

The OpenSSL developers have posted their response now:
https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/

--
        -Alan Coopersmith-              alan.coopersmith () oracle com
         Oracle Solaris Engineering - http://blogs.oracle.com/alanc


Current thread: