OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701) Usual Mandatory Disclaimer: IANAC (I am not a cryptographer) so I might likely end up writing a bunch of mistakes in this blog post... tl;dr The OpenSSL 1.0.2 releases suffer from a Key Recovery Attack on DH small subgroups. This issue got assigned CVE-2016-0701 with a severity of High and OpenSSL 1.0.2 users should upgrade to 1.0.2
