Fwd: Tor security advisory: DH handshake flaw
Ben Laurie
ben at algroup.co.uk
Thu Sep 1 04:40:11 EDT 2005
Simon Josefsson wrote:
> Btw, could you describe the threat scenario where you believe this
> test would be useful?
Well, that's an interesting question. I have to admit that I am no
longer sure there is any point. If people do an appropriate number of
rounds of Miller-Rabin whenever they're handed a number that is
supposedly prime, they're pretty safe.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html http://www.thebunker.net/
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com
More information about the cryptography
mailing list