Fwd: Tor security advisory: DH handshake flaw

Ben Laurie ben at algroup.co.uk
Thu Sep 1 04:40:11 EDT 2005


Simon Josefsson wrote:
> Btw, could you describe the threat scenario where you believe this
> test would be useful?

Well, that's an interesting question. I have to admit that I am no 
longer sure there is any point. If people do an appropriate number of 
rounds of Miller-Rabin whenever they're handed a number that is 
supposedly prime, they're pretty safe.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list