[TLS] Re: Short Ephermal Diffie-Hellman keys

[Simon Josefsson <simon at josefsson.org>]

Dr Stephen Henson <lists at drh-consultancy.demon.co.uk> writes:

> Pasi.Eronen at nokia.com wrote:
>> Mike wrote:
>> 
>>> This is probably the result of an administrator not wanting to
>>> wait the extra 30 seconds to generate a strong key.  If the
>>> server is set up to generate a key on startup, it may not start
>>> listening for connections until it has completed the task.
>> 
>> Generating a 1024-bit DH key on a modern PC takes less 
>> than 30 _milli_seconds, so I doubt this is the real reason 
>> (unless the implementation is really, really stupid).
>> 
>
> The 30 seconds reference should be for DH _parameter_ generation (which
> some servers perform on start up) rather than key generation.

Furthermore, getting the entropy needed to generate DH parameters can be
the bottleneck, especially on servers that also consume entropy for
incoming connections.

Some applications that use GnuTLS (I believe Exim is an example) have a
separate script invoked once every day (or similar) to re-generate the
DH parameters.  This approach works fine even if getting the entropy is
a bottle-neck, since it allows servers to continue to run using the
earlier DH parameters until the new parameters have been generated.

/Simon

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls