Top 10 winner
LogJam
Logjam lets a man-in-the-middle downgrade a TLS handshake to 512-bit export-grade Diffie-Hellman and then solve it, reading and altering the traffic. Because millions of servers reuse the same few primes, one huge precomputation per prime would let a state-level attacker passively decrypt a large share of HTTPS, SSH and VPN connections.
Record
- Published by
- Schneier on Security
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Schneier on Security, first published at the original source. Preserved copies are kept so the citation survives its host.