[18355] in cryptography@c2.net mail archive
Re: Fwd: Tor security advisory: DH handshake flaw
daemon@ATHENA.MIT.EDU (Ben Laurie)
Thu Sep 1 11:48:46 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Thu, 01 Sep 2005 09:40:11 +0100
From: Ben Laurie <ben@algroup.co.uk>
To: Simon Josefsson <jas@extundo.com>
Cc: cryptography@metzdowd.com, astiglic@okiok.com
In-Reply-To: <iluy86iwl8e.fsf@latte.josefsson.org>
Simon Josefsson wrote:
> Btw, could you describe the threat scenario where you believe this
> test would be useful?
Well, that's an interesting question. I have to admit that I am no
longer sure there is any point. If people do an appropriate number of
rounds of Miller-Rabin whenever they're handed a number that is
supposedly prime, they're pretty safe.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html http://www.thebunker.net/
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com