Project

General

Profile

Actions

Feature #28605

closed

Security weakness : Diffie-Hellman key

Added by L'Orphelin Cyril about 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
Service
Target version:
-
Start date:
02/22/2018
Due date:
% Done:

0%

Estimated time:

Description

Improve the security of Lavoisier for Diffie-Hellman (DH) key exchange parameters .

Diffie-Hellman key exchange is a popular cryptographic algorithm that allows Internet protocols to agree on a shared key and negotiate a secure connection. It is fundamental to many protocols including HTTPS, SSH, IPsec, SMTPS, and protocols that rely on TLS.

If you have a web or mail server, you should disable support for export cipher suites and use a 2048-bit Diffie-Hellman group.

Actions

Also available in: Atom PDF