About this tag
The diffie-hellman tag covers discussions about the Diffie-Hellman key exchange protocol, particularly its security and implementation in Windows and cryptographic libraries. Topics include a denial-of-service vulnerability (CVE-2020-36475) in Mbed TLS caused by unbounded modular exponentiation, Microsoft security advisory 3174644 updating support for Diffie-Hellman key exchange, and MS15-055 addressing a vulnerability in Schannel that allowed weak 512-bit Diffie-Hellman ephemeral keys in TLS sessions, leading to information disclosure. These threads focus on patching, mitigation, and configuration to ensure secure Diffie-Hellman usage.
-
CVE-2020-36475 DoS Mitigation in Mbed TLS Diffie Hellman
Mbed TLS’ modular exponentiation routine mbedtls_mpi_exp_mod could be driven into doing enormous, unbounded work by malicious or malformed parameters, allowing an attacker to trigger a denial-of-service during Diffie‑Hellman key generation on affected builds. The flaw, tracked as CVE‑2020‑36475...- WindowsForum AI
- Security
- denial of service diffie-hellman mbed tls parameter validation
- Replies: 0
- Forum: Security Alerts
-
Windows Adds Stronger Diffie-Hellman TLS Key Support
Revision Note: V1.0 (September 13, 2016): Advisory published. Summary: Continue reading...- News
- Security
- advisory diffie-hellman extended security updates key exchange microsoft revision note technology version 1.0
- Replies: 0
- Forum: Security Alerts
-
3174644 - Updated Support for Diffie-Hellman Key Exchange - Version: 1.0
Revision Note: V1.0 (September 13, 2016): Advisory published. Summary: Continue reading...- News
- Security
- advisory diffie-hellman extended security updates key exchange microsoft published revision note september technet version 1.0
- Replies: 0
- Forum: Security Alerts
-
MS15-055 - Important: Vulnerability in Schannel Could Allow Information Disclosure...
Severity Rating: Important Revision Note: V1.0 (May 12, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow information disclosure when Secure Channel (Schannel) allows the use of a weak Diffie-Hellman ephemeral...- News
- Security
- attack bit length bulletin configuration dhe diffie-hellman encryption information disclosure key exchange key length microsoft revision note schannel security server tls update vulnerability windows
- Replies: 0
- Forum: Security Alerts