Date: Wed, 20 May 2015 17:23:40 -0700 From: Alan Coopersmith <alan.coopersmith@...cle.com> To: oss-security@...ts.openwall.com CC: Yves-Alexis Perez <corsac@...ian.org> Subject: Re: Logjam attack / Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice On 05/20/15 04:57 AM, Yves-Alexis Perez wrote: > I guess most people will already have seen that, but just in case, > because it might interest readers (even though it's not specifically > about open source stuff). > > https://weakdh.org/ > https://weakdh.org/imperfect-forward-secrecy.pdf The OpenSSL developers have posted their response now: https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/ -- -Alan Coopersmith- alan.coopersmith@...cle.com Oracle Solaris Engineering - http://blogs.oracle.com/alanc
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ