How to Protect Yourself from NSA Attacks on 1024-bit DH

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by agwa on Friday October 16, 2015 @12:33PM (#10400426)

OpenVPN makes you provide your own parameters; there is no default.

As of Apache 2.4.7, the default DH parameters have the same number of bits as your RSA key, and since CAs have required at least 2048 bit RSA for a few years now, you'll be fine.

OpenSSH does ship parameters that are larger than 1024 bits (in addition to 1024 bit parameters), and with the "group-exchange" kex, sufficiently-secure parameters should be negotiated with clients, although I haven't looked too closely to see if this might be vulnerable to downgrade attacks.

Last I looked nginx used fixed 1024 bit parameters, which is very bad. I don't know if this has changed or if there's a bug report.

[ Parent | on HN ]

Re:How to Protect Yourself from NSA Attacks on 1024-bit DH by jamielinux on Friday October 16, 2015 @02:08PM (#10401049)

  agwa wrote:
  > Last I looked nginx used fixed 1024 bit parameters, which is very bad.
  > I don't know if this has changed or if there's a bug report.

NGINX has had the ssl_dhparam directive (allowing dhparam of arbitrary size) since version 0.7.2, released in 2008.

[ Parent | on HN ]