yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-29 16:04:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

Improve top warning in dhm.h

Browse Source
This commit is contained in:
Hanno Becker 2017-10-04 16:05:10 +01:00
parent a90658f248
commit e3481ab533
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
include/mbedtls/dhm.h
View File

@ -36,6 +36,14 @@
* primes cannot be trusted because of the possibility of backdoors * primes cannot be trusted because of the possibility of backdoors
* that can't be effectively checked for. * that can't be effectively checked for.
* *
* Diffie-Hellman-Merkle is therefore a security risk when not using
* standardized primes generated using a trustworthy ("nothing up
* my sleeve") method, such as the RFC 3526 / 7919 primes. In the TLS
* protocol, DH parameters need to be negotiated, so using the default
* primes systematically is not always an option. If possible, use
* Elliptic Curve Diffie-Hellman (ECDH), which has better performance,
* and for which the TLS protocol mandates the use of standard
* parameters that were generated in a nothing-up-my-sleeve manner.
* We therefore consider DHE a security risk. If possible, it is * We therefore consider DHE a security risk. If possible, it is
* recommended users should consider preferring other methods of * recommended users should consider preferring other methods of
* key exchange. * key exchange.