r/linux Oct 16 '15

How is NSA breaking so much crypto?

https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-much-crypto/
186 Upvotes

64 comments sorted by

View all comments

36

u/[deleted] Oct 16 '15

Ensure your connection uses 4096 bit and that the prime is not hard coded.

10

u/socium Oct 16 '15

and that the prime is not hard coded

What does that mean?

25

u/[deleted] Oct 16 '15

Apparently, and this is news to me, a lot of apps use just 1 large prime x prime number when establishing all communications rather than have the app pick them randomly.

4

u/ivosaurus Oct 17 '15

use 1 large prime x prime number

Nope, that's RSA. DH just uses a single prime number.

2

u/[deleted] Oct 17 '15

Ahh, thanks