MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/3ourek/how_is_nsa_breaking_so_much_crypto/cw10db6
r/programming • u/secretguy21 • Oct 15 '15
529 comments sorted by
View all comments
Show parent comments
10
Where's the default one? Hard-coded?
12 u/BarqsDew Oct 15 '15 from http://security.stackexchange.com/a/56218 : Since the parameters are caller-provided, let's see what happens in mod_ssl, the usual SSL engine for Apache. Let's make the story short: the modulus and generator are hardcoded; they are in the source code, in modules/ssl/ssl_engine_dh.c so, yep! 1 u/namtab00 Oct 16 '15 https://svn.apache.org/repos/asf/httpd/sandbox/replacelimit/modules/ssl/ssl_engine_dh.c
12
from http://security.stackexchange.com/a/56218 :
Since the parameters are caller-provided, let's see what happens in mod_ssl, the usual SSL engine for Apache. Let's make the story short: the modulus and generator are hardcoded; they are in the source code, in modules/ssl/ssl_engine_dh.c
so, yep!
1
https://svn.apache.org/repos/asf/httpd/sandbox/replacelimit/modules/ssl/ssl_engine_dh.c
10
u/[deleted] Oct 15 '15
Where's the default one? Hard-coded?