Re: [TLS] Short Ephermal Diffie-Hellman keys

[Dr Stephen Henson <lists at drh-consultancy.demon.co.uk>]

Bodo Moeller wrote:
> 
> It's only shorter secret values (DH exponents) that can be used in a
> secure way.  But then the client coudn't easily reject these anyway.
> 

Speaking of which what do people think about including the sub prime
value (aka "q") as an optional value in DH parameters in a TLS 1.2
handshake?

Steve.
-- 
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.co.uk/
Email: shenson at drh-consultancy.co.uk, PGP key: via homepage.

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls