diffie-hellman

The diffie-hellman tag covers discussions about the Diffie-Hellman key exchange protocol, particularly its security and implementation in Windows and cryptographic libraries. Topics include a denial-of-service vulnerability (CVE-2020-36475) in Mbed TLS caused by unbounded modular exponentiation, Microsoft security advisory 3174644 updating support for Diffie-Hellman key exchange, and MS15-055 addressing a vulnerability in Schannel that allowed weak 512-bit Diffie-Hellman ephemeral keys in TLS sessions, leading to information disclosure. These threads focus on patching, mitigation, and configuration to ensure secure Diffie-Hellman usage.