News for hackers. Stuff that matters.

A comment on D(HE)at: A Practical DoS Attack on the Finite Field Diffie–Hellman Key Exchange.

Re:D(HE)at: A Practical DoS Attack on the Finite Field Diffi... by thadt on Thursday March 07, 2024 @04:19PM (#39634697)
This specifically (CPU exhaustion attack) is called out as a rationale for why Wireguard implements cookie reply packets[1]. If a verified source is DOSing you with bad handshakes, maybe its time for their IP to be put in timeout in an upstream routing table.

[1] https://www.wireguard.com/protocol/#dos-mitigation

[ Parent | on HN ]

There are no comments on this comment yet.