[gnutls-dev] Re: Anonymity lost if same DH params re-used for
ephemeral RSA/DSS too?
Simon Josefsson
simon+gnutls-dev at josefsson.org
Sun Dec 21 12:24:34 CET 2003
Nikos Mavroyanopoulos <nmav at gnutls.org> writes:
> On Sun, Dec 21, 2003 at 09:49:08AM +0100, Simon Josefsson wrote:
>
>> This might not be exactly gnutls specific, but the question grow out
>> of a usage question of your API: is it OK to use the same D-H
>> parameters for both the ANON-DH and DHE-RSA/DSS key exchanges? It
>> takes several seconds to generate the D-H params, so I'd rather not
>> generate two sets if it can be avoided.
> Yes it's perfectly fine to use the same DH parameters. It does
> not weaken the protocol in any way.
Good, thanks for quick response.
Btw, I have verified that 1.0.3 solved my gnutls_bye problem.
Thanks,
Simon
More information about the Gnutls-dev
mailing list