According to
https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-m
uch-crypto/ 

"Since a handful of primes are so widely reused, the payoff, in
terms of connections they could decrypt, would be enormous. Breaking a single,
common 1024-bit prime would allow NSA to passively decrypt connections to
two-thirds of VPNs and a quarter of all SSH servers globally. Breaking a
second 1024-bit prime would allow passive eavesdropping on connections to
nearly 20% of the top million HTTPS websites. In other words, a one-time
investment in massive computation would make it possible to eavesdrop on
trillions of encrypted connections."

How is the prime set up for DH in
OpenSSH and is that something a user can change?





----
Sent using
GuerrillaMail.com
Block or report abuse:
https://www.guerrillamail.com/abuse/?a=TEhnBi0PU7Ebih2wvnENdQ%3D%3D

Reply via email to