Re: DH Group Exchange in SSH (RFC 4419) - Avoiding Backsdoors

Damien Miller <[email protected]>
Newsgroups gmane.ietf.secsh,gmane.ietf.curdle
Message-ID <[email protected]> 
On Thu, 29 Sep 2016, Mark D. Baushke wrote:

> Hi,
> 
> Question:
> 
> Should RFC 4419 - "Diffie-Hellman Group Exchange for the Secure Shell
> (SSH) Transport Layer Protocol" be deprecated?
> 
> Background:
> 
> The paper "How to Backdoor Diffie-Hellman" by David Wong
> https://eprint.iacr.org/2016/644.pdf describes two ways
> of creating a Nobody-But-Us (NOBUS) Diffie-Hellman backdoor:

NOBUS backdoors aren't the only concern; another motivation was
logjam-style precomputation attacks.

-d
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.