3 ms·

What diffie-hellman hack are you referring to? I'm curious.

• monocasa 8y ago
  https://thehackernews.com/2015/10/nsa-crack-encryption.html https://thehackernews.com/2015/10/nsa-crack-encryption.html https://weakdh.org/imperfect-forward-secrecy-ccs15.pdf https://weakdh.org/imperfect-forward-secrecy-ccs15.pdf Basically, for about $100M per prime (probs cheaper now), you can pre compute a big table that you can use to decrypt the diffie hellman exchange. From there you have the negotiated private keys, and you're off to the races for a full, real time decrypt. Since before the Snowden leaks, there wasn't the public thought that the choice of primes for diffie hellman mattered really for it's security, most implementations hardcoded the prime. Something like 92% of the top 1 million https sites were using the same 2 primes, and similar numbers of VPN and SSH implementations were vulnerable too. So for a one time cost of ~$200m the NSA was able to decrypt the vast majority of internet traffic as long as they caught the diffie hellman exchange at the beginning.