3 ms·
It lowers the damage stealing a key can do, whether via factoring or some other information leakage, for bad ciphers and good ciphers. And obviously, we should
by x0x0 12y ago
It lowers the damage stealing a key can do, whether via factoring or some other information leakage, for bad ciphers and good ciphers. And obviously, we should stop supporting intentionally broken ciphers.
- matthewdgreen 12y agoWhat is worth mentioning here is that Apache servers do the same thing for Diffie-Hellman 'ephemeral' keys. We imagine those keys are generated for each session, but in fact one key can last for weeks and millions of sessions. (I leave it to someone with more Apache familiarity to correct me.)
- mnordhoff 12y agoWait, Diffie-Hellman keys? Don't those have to be unique? Do you mean the session ticket keys, used to encrypt session resumption information? https://www.imperialviolet.org/2013/06/27/botchingpfs.html https://www.imperialviolet.org/2013/06/27/botchingpfs.html
- matthewdgreen 12y agoI mean DHE keys.