RE: [TLS] Re: Short Ephermal Diffie-Hellman keys

[<Pasi.Eronen at nokia.com>]

Simon Josefsson wrote:

> Some applications that use GnuTLS (I believe Exim is an example)
> have a separate script invoked once every day (or similar) to
> re-generate the DH parameters.  This approach works fine even if
> getting the entropy is a bottle-neck, since it allows servers to
> continue to run using the earlier DH parameters until the new
> parameters have been generated.

BTW, why do you generate new DH parameters in the first place?

Earlier I suggested that TLS 1.2 spec should probably recommend just
hardcoding some of the groups from RFC 3526 (i.e., recommend against
generating DH parameters). This would simplify code and provide less
opportunities for getting things wrong (e.g. very small primes seen by
Yngve; small subgroup attacks; etc.).

http://www1.ietf.org/mail-archive/web/tls/current/msg01115.html

Best regards,
Pasi

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls