Hacker News new | past | comments | ask | show | jobs | submit login

DH over elliptic curves is definitely fast enough for general purpose use, but on low-power devices it could be problematic. I think a better approach is the one I used in spiped: Each connection can pick whether to do a DH computation and get forward secrecy or to instead use a DH exponent of zero and still get regular secrecy.

Alas, SSL doesn't support such a mechanism.




Why can't the client just not list the DH cipher suites in the Client Hello?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: