Weak Diffie-Hellman and the Logjam Attack

Diffie-Hellman key exchange is a popular cryptographic algorithm that allows Internet protocols to agree on a shared key and negotiate a secure connection. It is fundamental to many protocols including HTTPS, SSH, IPsec, SMTPS, and protocols that rely on TLS. We have uncovered several weaknesses in how Diffie-Hellman key exchange has been deployed: Logjam attack against the TLS protocol. The Logja

[tkpyoi]

Diffie-Hellman鍵交換の脆弱性に該当するか確認。

[generation_abp]

!

[Cujo]

Fx801『Warning! Your web browser is vulnerable to Logjam and can be tricked into using weak encryption. You should update your browser. 』/IE8『Good News! Your browser is safe against the Logjam attack. 』

[s17er]

Chrome, Firefoxがアウトで、IE10ではセーフという結果が

[takeshiyako]

TLSの脆弱性がチェックできるサイト。

[nna774]

また名前付き脆弱性だ。

[kazutox]

TLSの脆弱性チェック

[Jxck]

今度は Diffie-Hellman か。。

[fcicq]

allow ECDH & DH-2048+ only

[kazuhooku]

DH使うTLSへの攻撃

[yosuke_furukawa]

!

[jovi0608]

Exportレベルの512bit長DH鍵だけじゃなくて1024bit長DHももう危ないのか。