[gnutls-devel] weak dh issue

Tim Kosse tim.kosse at filezilla-project.org
Wed May 20 22:36:56 CEST 2015


On 2015-05-20 20:32, Nikos Mavrogiannopoulos wrote:
> Checking it further, it seems the current is not 768 but 1008. It is the
> web page that wasn't updated.

The documentation for the deprecated gnutls_dh_set_prime_bits currently
says "values lower than 512 bits may allow decryption of the exchanged
data". I suppose this needs to be updated as well as long as the
function isn't removed.

Tim Kosse

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20150520/b8ef0369/attachment.sig>

More information about the Gnutls-devel mailing list