Re: Some stuff about Diffie-Hellman (and more :-)

[rcain@netcom.com (Robert Cain)]

Perry E. Metzger sez:
> 
> You don't care if a listener hears the information on the modulus and
> generator. It doesn't matter. You can broadcast it in the clear.

Ah.  Now I understand what you meant.

> 
> The point I was making was that if you always use the same modulus the
> attacker can expend the effort to attack your modulus just once and
> can then crack individual D-H sessions trivially. If you change each
> time, you can't be attacked in this way.

Good idea.  Think I'll steal it.  I'll just let the little beastie
search for good ones while it isn't doing anything else and isn't
running off its batteries.  :-)


Peace,

Bob

-- 
Bob Cain    rcain@netcom.com   408-354-8021


           "I used to be different.  But now I'm the same."


--------------PGP 1.0 or 2.0 public key available on request.------------------