Blog / Security

Security

Server has a Weak Ephemeral Diffie-Hellman Public Key

Diffie-Hellman key exchange is used to securely exchange cryptographic keys over an insecure public channel. The parties in the exchange choose a private key and come up with a public key. They both share the keys and calculate a shared secret key, which they will use for symmetric key algorithms and secure communications. In the case of a Man-in-the-Middle attack, the attackers can intercept the DH exchange, but they cannot compute the final symmetric keys. With Ephemeral Diffie-Hellman key exchanges, temporary DH secret keys are generated for the connections. Therefore, the same key pairs are never used twice. The Diffie-Hellman…

Read more