[18355] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Fwd: Tor security advisory: DH handshake flaw

daemon@ATHENA.MIT.EDU (Ben Laurie)
Thu Sep 1 11:48:46 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Thu, 01 Sep 2005 09:40:11 +0100
From: Ben Laurie <ben@algroup.co.uk>
To: Simon Josefsson <jas@extundo.com>
Cc: cryptography@metzdowd.com, astiglic@okiok.com
In-Reply-To: <iluy86iwl8e.fsf@latte.josefsson.org>

Simon Josefsson wrote:
> Btw, could you describe the threat scenario where you believe this
> test would be useful?

Well, that's an interesting question. I have to admit that I am no 
longer sure there is any point. If people do an appropriate number of 
rounds of Miller-Rabin whenever they're handed a number that is 
supposedly prime, they're pretty safe.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post