Re: [TLS] Short Ephermal Diffie-Hellman keys

[Nelson B Bolyard <nelson at bolyard.com>]

Yngve N. Pettersen (Developer Opera Software ASA) wrote:
> Hello all,
> 
> I have recently started to see an increasing number of reports about  
> SSL/TLS servers using short Ephermal Diffie-Hellman keys, in some cases  
> very short ones.
> 
> Opera's SSL/TLS client will display warnings to users if the server is  
> using RSA/DH/DSA keys shorter than (currently) 900 bits. 

Do you mean the length of the public value?  or the length of the prime P?

Do you really wish to disallow public values that are low numeric values
even when the prime P is adequately large?

-- 
Nelson B

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls