Re: [TLS] Short Ephermal Diffie-Hellman keys

[jimmy <jimmyb at huawei.com>]

Bodo Moeller wrote:
[snip]
> While this really is about the prime P and not the public value, it
> wouldn't be wrong to disallow small public values.  In practice the
> public value won't be too much shorter than the public value unless

you meant 'public value won't be too much shorter than the prime' right?

> something weird (and presumably insecure) is going on.
>
> It's only shorter secret values (DH exponents) that can be used in a
> secure way.  But then the client coudn't easily reject these anyway.
>
> Bodo


-jb
--
The biggest problem with communication is the illusion that it has occurred.


_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls