[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gnutls-dev
Subject:    Re: [gnutls-devel] weak dh issue
From:       Nikos Mavrogiannopoulos <nmav () gnutls ! org>
Date:       2015-05-21 9:57:34
Message-ID: CAJU7zaJLY3mY9yA5pddMFC4NrbpX2V10nQmgM0HyQVMjdFf9hg () mail ! gmail ! com
[Download RAW message or body]

On Wed, May 20, 2015 at 10:36 PM, Tim Kosse
<tim.kosse@filezilla-project.org> wrote:
> Hi,
> The documentation for the deprecated gnutls_dh_set_prime_bits currently
> says "values lower than 512 bits may allow decryption of the exchanged
> data". I suppose this needs to be updated as well as long as the
> function isn't removed.

Updated to warn if setting anything lower than the current default.
https://gitlab.com/gnutls/gnutls/commit/de12109088650e3c55e1b942987d899b15ca2a17

regards,
Nikos

_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@lists.gnutls.org
http://lists.gnupg.org/mailman/listinfo/gnutls-devel
[prev in list] [next in list] [prev in thread] [next in thread]